LEGRAND PDU - Page 358

June 2018
358 Legrand PDU User Guide
Variables:
 <filter> is the user search subfilter you specify.
 <bind_DN> is bind DN.
 <AD_domain> is the Active Directory Domain.
 <verify_cert> is one of the options: true or false.
Option Description
true
Enable the verification of the LDAP server
certificate.
false
Disable the verification of the LDAP server
certificate.
 <allow_exp_cert> is one of the options: true or false.
Option Description
true
Certificates that are either expired or not valid yet
are all accepted.
false
Only valid certificates are accepted.
Illustrations of Adding LDAP Servers
This section shows several LDAP command examples. Those words highlighted in bold are required for their
respective examples.
 An OpenLDAP server:
config:#
authentication ldap add op-ldap.raritan.com 389 openldap none
anonymousBind dc=raritan,dc=com uid inetOrgPerson
 A Microsoft Active Directory server:
config:#
authentication ldap add ac-ldap.raritan.com 389 activeDirectory none
anonymousBind dc=raritan,dc=com sAMAccountName user adDomain
raritan.com
 An LDAP server with a TLS certificate uploaded:
a. Enter the CLI command with the following two TLS-related options set and/or added:
 <security> is set to tls or startTls.
 The "verifyServerCertificate" parameter is added to the command and set to "true."
config:#
authentication ldap add ldap.raritan.com 389 openldap startTls ...
inetOrgPerson verifyServerCertificate true
b. The system now prompts you to enter the certificate's content.
c. Type or copy the certificate's content in the CLI and press Enter.
Note: The certificate's content is located between the line containing "BEGIN CERTIFICATE" and the line
containing "END CERTIFICATE".
 An LDAP server with the bind DN and bind password configured:
a. Enter the CLI command with the "bindDN" parameter and its data added.