Cisco Nexus 9000 Series - Configuration Examples for LDAP; Where to Go Next

PurposeCommand
Displays the LDAP configuration in the startup
configuration.
show startup-config ldap
Displays LDAP configuration information.show ldap-server
Displays LDAP server group configuration information.show ldap-server groups
Displays LDAP statistics.
show ldap-server statistics {hostname |
ipv4-address | ipv6-address}
Displays information about the configured LDAP attribute
maps.
show ldap-search-map
Configuration Examples for LDAP
The following example shows how to configure an LDAP server host and server group:
feature ldap
ldap-server host 10.10.2.2 enable-ssl
aaa group server ldap LdapServer
server 10.10.2.2
exit
show ldap-server
show ldap-server groups
The following example shows how to configure an LDAP search map:
ldap search-map s0
userprofile attribute-name att-name search-filter
(&(objectClass=inetOrgPerson)(cn=$userid)) base-DN dc=acme,dc=com
exit
show ldap-search-map
The following example shows how to configure AAA authorization with certificate authentication for an
LDAP server:
aaa authorization ssh-certificate default group LDAPServer1 LDAPServer2
exit
show aaa authorization
Where to Go Next
You can now configure AAA authentication methods to include the server groups.
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
124
Configuring LDAP
Configuration Examples for LDAP