Attribute Description
Required /
Optional
Default
value
When you choose ldap, specify "true" to
"auth.radius.domain-name.dns_lookup"
auth.radius.domain-
name.host
A host name, an IPv4 address or an IPv6
address of the LDAP server. An IPv6
address must be enclosed in square
brackets ([ ]).
Optional
1
None
auth.radius.domain-
name.port
A port number of the LDAP server.
Must be between 1 and 65535.
2
Optional 389
auth.radius.domain-
name.searchdn
DN of the user for searching. Required None
auth.radius.domain-
name.searchpw
User password for searching. Specify the
same password that is registered in the
LDAP server.
Required None
auth.radius.domain-
name.basedn
Base DN for searching for users to
authenticate. Specify DN of the hierarchy,
including all the users for searching
because the targeted users for searching
are in lower hierarchy than the specified
DN.
3
Optional abbr
auth.radius.domain-
name.timeout
The number of seconds before the
connection to the LDAP server times out.
Must be between 1 and 302.
Optional 10
auth.radius.domain-
name.retry.interval
Retry interval in seconds when the
connection to the LDAP server fails. Must
be between 1 and 5.
2
Optional 1
auth.radius.domain-
name.retry.times
Retry times when the connection to the
LDAP server fails. Must be between 0 and
3. 0 means no retry.
2
Optional 3
Notes:
1. The item can be omitted if true is specified for "auth.ldap.server-name.dns_lookup".
2. If the specified value is not valid, the default value will be used.
3. To use symbols such as + ; , < = and >, enter a backslash (\) before each symbol. When
using multiple symbols, each symbol must have a backslash before it. For example, to enter
abc++ in the searchdn field, use \+ instead of + as shown here: abc\+\+
To enter \ , /, or ", enter a backslash and then the ASCII code in hex for these symbols.
• Enter \5c for \.
• Enter \2f for /.
• Enter \22 for "
For example, to enter abc\ in the searchdn field, enter abc\5c.
Creating a Kerberos configuration file
To use an Kerberos server for authentication, create a configuration file in
UTF-8 encoding. Include information about the authentication server as
shown in the following example. Any file name and extension are allowed. If
an authorization server is not used, you do not need to define the items for
it.
User administration 193
System Administrator Guide for VSP Gx00 models and VSP Fx00 models