Setting the search bind Distinguished Name (DN)
The Set LDAP BindDN command is used to set the fully-qualified distinguished name (FQDN) for user
accounts to bind with. This is required for directory services that do not support anonymous binds.
This field is used ONLY with Simple Binds.
Maximum string length is 124 characters.
NOTE: If left blank, then an anonymous bind will be attempted. This field is used ONLY with Simple binds.
To set the search bind DN:
At the Sentry: prompt, type
set ldap binddn
, and press
Enter
. At the following prompt, type the
FQDN and press
Enter
.
Example
The following sets the FQDN for MSAD to ‘cn=guest,cn=Users,dc=servertech,dc=com’:
Sentry: set ldap binddn<Enter>
Enter Search Bind DN (Max characters 124):
cn=guest,cn=Users,dc=servertech,dc=com<Enter>
Setting the search bind Distinguished Name (DN) password
The Set LDAP BindPW command is used to set the password for the user account specified in the
Search Bind DN.
Maximum password size is 20 characters.
To set the Bind Password DN:
At the Sentry: prompt, type
set ldap bindpw
and press
Enter
.
At the following prompt, type the bind
password and press
Enter
.
Setting the group membership attribute.
The Set LDAP GroupAttr command is used to specify the name of user class attributes that lists
distinguished names (DN), or names of groups that a user is a member of. Maximum string length is 30
characters.
To set Group Membership Attribute:
At the Sentry: promp, type
set ldap groupattr
and press
Enter
.
At the following prompt,
type the
group membership attribute and press
Enter
.
Example
The following sets the group membership attribute for MSAD to ‘memberof’:
Sentry: set ldap groupattr<Enter>
Enter Group Member Attr (Max character 30):
memberof<Enter>
Setting the group membership value type:
The Set LDAP GroupType command is used to specify whether the values of Group Membership
Attribute represent the Distinguished Name (DN) of a group or just the name of the group.
To set group membership value type:
At the Sentry: prompt, type
set ldap grouptype
followed by
DN
or
Name
and press
Enter
.
Example
The following sets group membership value to DN
Sentry: set ldap grouptype DN<Enter>
56
•
Advanced Operations
Sentry PT22
Installation and Operations Manual
Summary of Contents for Sentry PT22
Page 44: ......
