ZyXEL Communications ZYWALL USG CLI - 28.2.6 aaa group server ldap Commands

Chapter 28 AAA Server
ZyWALL (ZLD) CLI Reference Guide
233
28.2.6 aaa group server ldap Commands
The following table lists the aaa group server ldap commands you use to configure a
group of LDAP servers.
Table 138 aaa group server ldap Commands
COMMAND DESCRIPTION
clear aaa group server ldap
[group-name]
Deletes all LDAP server groups or the specified LDAP
server group.
Note: You can NOT delete a server group
that is currently in use.
show aaa group server ldap group-
name
Displays the specified LDAP server group settings.
[no] aaa group server ldap group-
name
Sets a descriptive name for an LDAP server group.
Use this command to enter the sub-command mode.
The
no command deletes the specified server group.
aaa group server ldap rename
group-name group-name
Changes the descriptive name for an LDAP server
group.
aaa group server ldap group-name
[no] server basedn basedn Sets the base DN to point to the LDAP directory on the
LDAP server. The
no command clears this setting.
[no] server binddn binddn Sets the user name the ZyWALL uses to log into the
default LDAP server. The
no command clears this
setting.
[no] server cn-identifier uid Sets the user name the ZyWALL uses to log into the
default LDAP server. The no command clears this
setting.
[no] server host ldap_server Sets the LDAP server address. Enter the IP address
(in dotted decimal notation) or the domain name of an
LDAP server to add to this group. The
no command
clears this setting.
[no] server password password Sets the bind password (up to 15 characters). The
no
command clears this setting.
[no] server port port_no Sets the LDAP port number. Enter a number between
1 and 65535. The default is 389. The
no command
clears this setting.
[no] server search-time-limit
time
Sets the search timeout period (in seconds). Enter a
number between 1 and 300. The no command clears
this setting and set this to the default setting of 5
seconds.
[no] server ssl Enables the ZyWALL to establish a secure connection
to the LDAP server. The
no command disables this
feature.