ldap-server

Function

The ldap-server command configures the LDAP server.

The undo ldap-server command cancels the configured LDAP server.

By default, the LDAP server is not configured.

Format

ldap-server { authentication ldap-dn ldap-password | ip ldap-ip-address [ vpn-instance vpn-instance-name ] [ source source-ip-address ] { [ port port ] | [ version version ] } ^* }

undo ldap-server authentication

undo ldap-server

Parameters

Parameter	Description	Value
authentication ldap-dn	Specifies the user name of the LDAP server.	It is a string of 1 to 31 characters and case sensitive.
authentication ldap-password	Specifies the password of the LDAP server.	The value is a string of case-sensitive characters that can be letters or digits. The password can be a string of 1 to 31 characters in plain text or a string of 20 to 432 characters in encrypted text.
ip ldap-ip-address	Specifies the IP address of the LDAP server.	The value is in dotted decimal notation.
vpn-instance vpn-instance-name	Specifies the VPN instance to which the CA LDAP server belongs.	The value is a string of 1 to 31 case-sensitive characters, spaces not supported. In addition, the VPN instance name must not be _public_. When double quotation marks are used around the string, spaces are allowed in the string.
source source-ip-address	Specifies the source address that is used to download the CA certificate, local certificate, or CRL.	The value is in the IPv4 address format, and in dotted decimal notation.
port port	Specifies the port number of the LDAP server.	It is an integer ranging from 1 to 65535. The default value is 389.
version version	Specifies the version number of LDAP.	The value is 2 or 3. The default value is 3.

Views

PKI domain name configuration view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
pki	write

Usage Guidelines

Usage Scenario

To use LDAP for updating the CRL automatically, run the ldap-server command.

You should first run the crl ldap command to configure the automatic update of the CRL through LDAP, and then run the ldap-server command.

Example

# Set the IP address of the LDAP server to 10.1.1.1, the port number to 3389, and the version number of LDAP to 2.

<HUAWEI> system-view
[~HUAWEI] pki domain domain1
[*HUAWEI-pki-domain-domain1] crl ldap
[*HUAWEI-pki-domain-domain1] ldap-server ip 10.1.1.1 port 3389 version 2