| Attributes |
LdapDistinguishedName
mandatory |
-
baseDn
-
Default base DN to use in LDAP operations.
The base DN must be specified in an LDAP DN format, for example, 'ou=people,dc=mycompany,dc=com'. All LDAP objects used for authentication and authorization must be accessible from the base DN.
|
LdapDistinguishedName[0..1] |
-
bindDn
-
Default bind DN used to access the LDAP servers.
When configured, the ME uses the specified DN as the bind name for LDAP searches. The bind DN must be specified in an LDAP DN format, for example 'cn=bindaccount,dc=mycompany,dc=com'.
|
EcimPassword[0..1] |
-
bindPassword
-
Password used with bindDn to access the LDAP servers.
When configured, the ME establishes a password-based LDAP simple bind.
|
IpDNSAddress[0..1] |
-
fallbackLdapIpAddress
-
The IP or DNS address of the fallback LDAP server.
The fallback server is used when the primary server is inaccessible.
Default port number used is 389. The selected tlsMode overrides the default port number.
|
string
key
mandatory
noNotification
restricted |
-
ldapId
-
The value component of the RDN.
|
IpDNSAddress
mandatory |
-
ldapIpAddress
-
The IP or DNS address of the primary LDAP server.
Default port number used is 389. The selected tlsMode overrides the default port number.
|
ManagedObject[0..1] |
-
nodeCredential
-
The credential used for LDAP.
Specifies the DN of a NodeCredential MO in Certificate Management.
|
ProfileFilter[0..1] |
-
profileFilter
-
Selects an LDAP filter to determine the user's authorization profile.
Authorization profiles are used by authorization methods.
For ERICSSON_FILTER, the contained EricssonFilter MO must exist.
For FLEXIBLE, the contained Filter MO must exist.
|
uint16[0..1] |
-
serverPort
-
Specifies the server port number to access the primary and secondary LDAP servers.
Must only be specified when the default port number is not in use.
Default ports are:
389, when useTls is false.
389, when useTls is true and tlsMode is STARTTLS.
636, when useTls is true and tlsMode is LDAPS.
|
TlsMode |
-
tlsMode
=
STARTTLS
-
Toggles the TLS establishment mode to access the primary and secondary LDAP servers.
Takes effect when useTls is true.
|
ManagedObject[0..1] |
-
trustCategory
-
The set of certificates trusted by LDAP.
Specifies the DN of a TrustCategory MO in Certificate Management.
|
boolean |
-
useReferrals
=
false
-
Toggle to enable the use of referrals.
When set to false, the ME ignores referrals returned by the LDAP server.
When set to true, the ME follows referrals. Referrals can be used for authentication and authorization only if the referral URI refers back to a directory tree within the same LDAP server instance; otherwise, access is denied for referred user accounts.
|
string[0..1] |
-
userLabel
-
An additional descriptive text.
|
boolean
mandatory |
-
useTls
-
Toggle to enable TLS access to primary and secondary LDAP targets.
|