Manage LDAP/SSL Alternate Server

Language:

Note - You can use the get and set commands to configure the LDAP/SSL Alternate Server settings. For a description of the MIB objects used in this procedure, see the table that follows the procedure.

Log in to a host that has an SNMP tool and the Oracle ILOM MIBs installed. For example, type:
ssh username@snmp_manager_ipaddress

Password: password

Refer to the following SNMP command examples:

To view the IP address of LDAP/SSL alternate server ID number 3, type:

% snmpget SNMP_agent
ilomCtrlLdapSslAlternateServerIp.3
SUN-ILOM-CONTROL-MIB::ilomCtrlLdapSslAlternateServerIp.3 = 
IpAddress: 10.7.143.236

To set the IP address of LDAP/SSL alternate server ID number 3 to 10.7.143.246, type:

% snmpset SNMP_agent
ilomCtrlLdapSslAlternateServerIp.3 a 10.7.143.246
SUN-ILOM-CONTROL-MIB::ilomCtrlLdapSslAlternateServerIp.3 = 
IpAddress: 10.7.143.246
% snmpget SNMP_agent
ilomCtrlLdapSslAlternateServerIp.3
SUN-ILOM-CONTROL-MIB::ilomCtrlLdapSslAlternateServerIp.3 = 
IpAddress: 10.7.143.246

To view and clear the certificate information associated with the alternate server when it is set to true, type:

% snmpget SNMP_agent
ilomCtrlLdapSslAlternateServerCertClear.0
% snmpset SNMP_agent
ilomCtrlLdapSslAlternateServerCertClear.0 i 0

To view the alternate server certificate version of the certificate file, type:
```
% snmpget SNMP_agent ilomCtrlLdapSslAlternateServerCertVersion.0
```

To view the serial number of the alternate server certificate file, type:
```
% snmpget SNMP_agent ilomCtrlLdapSslAlternateServerCertSerialNo.0
```

To view the issuer of the alternate server certificate file, type:

% snmpget SNMP_agent ilomCtrlLdapSslAlternateServerCertIssuer.0

To view the subject of the alternate server certificate file, type:

% snmpget SNMP_agent ilomCtrlLdapSslAlternateServerCertSubject.0

To view the valid start date of the alternate server certificate file, type:
```
% snmpget SNMP_agent 
ilomCtrlLdapSslAlternateServerCertValidBegin.0
```

To view the valid end date of the alternate server certificate file, type:

% snmpget SNMP_agent ilomCtrlLdapSslAlternateServerCertValidEnd.0

The following table describes the LDAP/SSL Alternate Server SNMP MIB objects.

MIB Object	Description	Allowed Values	Type	Default
`ilomCtrlLdap SslAlternate ServerId`	An integer identifier of the LDAP/SSL alternate server table.	1 to 5 Note - This object is not accessible for reading or writing.	Integer	None
`ilomCtrlLdap SslAlternate ServerIP`	The IP address of the LDAP/SSL alternate server used as directory server for user accounts.	`ipaddress`	String	None
`ilomCtrlLdap SslAlternate ServerPort`	Specifies the port number for the LDAP/SSL alternate server. Specifying 0 as the port indicates that auto-select will use the well-known port number. Specifying 1-65535 explicitly sets the port number.	`portnumber` (range: 0 to 65535)	Integer	None
`ilomCtrlLdap SslAlternate ServerCert` `Status`	A string indicating the status of the certificate file. This is useful in determining whether a certificate file is present or not.	`status` (maximum size: 255 characters)	String	None
`ilomCtrlLdap SslAlternate ServerCert` `URI`	This is the URI of a certificate file needed when Strict Certificate Mode is enabled. Setting the URI causes the transfer of the file, making the certificate available immediately for certificate authentication. Additionally, either `remove` or `restore` are supported for direct certificate manipulation.	`URI`	String	None