User authentication
LDAP
LR54 User Guide
827
n
off
: Uses a non-secure TCP connection on the LDAP standard port, 389.
n
on
: Uses an SSL/TLS encrypted connection on port 636.
n
start_tls
: Makes a non-secure TCP connection to the LDAP server on port 389, then
sends a request to upgrade the connection to a secure TLS connection. This is the
preferred method for LDAP.
The default is
off
.
5. If
tls
is set to
on
or
start_tls
, configure whether to verify the server certificate:
(config)> auth ldap verify_server_cert
value
(config)>
where
value
is either:
n
true
: Verifies the server certificate with a known Certificate Authority.
n
false
: Does not verify the certificate. Use this option if the server is using a self-signed
certificate.
The default is
true
.
6. Set the distinguished name (DN) that is used to bind to the LDAP server and search for users.
Leave this option unset if the server allows anonymous connections.
(config)> auth ldap bind_dn
dn_value
(config)>
For example:
(config)> auth ldap bind_dn cn=user,dc=example,dc=com
(config)>
7. Set the password used to log into the LDAP server. Leave this option unset if the server allows
anonymous connections.
(config)> auth ldap bind_password
password
(config)>
8. Set the distinguished name (DN) on the server to search for users. This can be the root of the
directory tree (for example,
dc=example,dc=com
) or a sub-tree (for example.
ou=People,dc=example,dc=com
).
(config)> auth ldap base_dn
value
(config)>
9. Set the login attribute:
(config)> auth ldap login_attribute
value
(config)>
where value is the user attribute containing the login of the authenticated user. For example,
in the
, the login attribute is
uid
. . If this attribute is not set, the user
will be denied access.
10. (Optional) Set the name of the user attribute that contains the list of LR54 authentication
groups that the authenticated user has access to. See
for further
