Configure LDAP over SSL Client Properties (Oracle ILOM CLI)

As part of configuring LDAP over SSL properties, specify the following properties:

• Server and port on which LDAP over SSL communication occurs.

• Timeout for communication.

• Specific roles and privileges that the user has on the switch.

• Whether certificates are required (strict certificate mode).

1. Enable LDAP over SSL.

   See Enable the LDAP over SSL Client (Oracle ILOM CLI).

2. Set the server address for the primary LDAP over SSL server.

   -> set /SP/clients/ldapssl address=123.45.67.89
   Set 'address' to '123.45.67.89'
   ->
   

3. Set the port for LDAP over SSL communication.

   -> set /SP/clients/ldapssl port=188
   Set 'port' to '188'
   ->
   

4. Set the timeout value for LDAP over SSL communication.

   -> set /SP/clients/ldapssl/ timeout=10
   Set 'timeout' to '10'
   ->
   

5. Set the default role assigned to LDAP over SSL users.

   -> set /SP/clients/ldapssl/ defaultrole=s
   Set 'defaultrole' to 's' [os]
   ->
   

   For the role, you can use the characters of the aucros string to enable the respective abilities. See User Roles and Permissions.

6. (Optional) Set the amount of information to include for LDAP over SSL communication and events written to the audit and event logs.

   -> set /SP/clients/ldapssl/ logdetail=value
   ->
   

   where value is:

   • high, medium, low, or trace for more or less information in the log.

   • none for either no details, or to completely disable logging.

   For example, to include the most amount of information, type:

   -> set /SP/clients/ldapssl/ logdetail=high
   Set 'logdetail' to 'high'
   ->
   

7. Enable strict certificate mode.

   -> set /SP/clients/ldapssl/ strictcertmode=enabled
   Set 'strictcertmode' to 'enabled'
   ->
   

   ---

   Note -  To use this option, the authentication server certificate file must be available to the switch.

   ---

Related Information

• Manage an LDAP over SSL Server's Certificate (Oracle ILOM CLI)

• Configure Alternate LDAP over SSL Servers (Oracle ILOM CLI)

• Manage Certificates for Alternate LDAP over SSL Servers (Oracle ILOM CLI)

• LDAP over SSL Groups (Oracle ILOM CLI)

• Configure an LDAP over SSL Administrator Group (Oracle ILOM CLI)

• Configure an LDAP over SSL Operator Group (Oracle ILOM CLI)

• Configure an LDAP over SSL Custom Group (Oracle ILOM CLI)

• Configure an LDAP over SSL User Domain (Oracle ILOM CLI)

• Configure an LDAP over SSL Optional User Mapping (Oracle ILOM CLI)

• Disable the LDAP over SSL Client (Oracle ILOM CLI)

• Display the Oracle ILOM LDAP over SSL Client Information (Oracle ILOM CLI)

• Display LDAP over SSL Properties (Oracle ILOM CLI)