ZyXEL Communications ZYWALL 1050 - V2.00 EDITION 1 Podręcznik Użytkownika Strona 254

  • Pobierz
  • Dodaj do moich podręczników
  • Drukuj
  • Strona
    / 386
  • Spis treści
  • BOOKMARKI
  • Oceniono. / 5. Na podstawie oceny klientów
Przeglądanie stron 253
Chapter 29 AAA Server
ZyWALL (ZLD) CLI Reference Guide
254
29.2.5 aaa group server ad Commands
The following table lists the aaa group server ad commands you use to configure a
group of AD servers.
Table 147 aaa group server ad Commands
COMMAND DESCRIPTION
clear aaa group server ad [group-
name]
Deletes all AD server groups or the specified AD
server group.
Note: You can NOT delete a server group
that is currently in use.
show aaa group server ad group-
name
Displays the specified AD server group settings.
[no] aaa group server ad group-
name
Sets a descriptive name for an AD server group. Use
this command to enter the sub-command mode.
The
no command deletes the specified server group.
aaa group server ad rename group-
name group-name
Changes the descriptive name for an AD server group.
aaa group server ad group-name Enter the sub-command mode to configure an AD
server group.
[no] server alternative-cn-
identifier uid
Sets the second type of identifier that the users can
use to log in if any. For example “name” or “e-mail
address”. The
no command clears this setting.
[no] server basedn basedn Sets the base DN to point to the AD directory on the
AD server group. The
no command clears this setting.
[no] server binddn binddn Sets the user name the ZyWALL uses to log into the
AD server group. The
no command clears this setting.
[no] server cn-identifier uid Sets the user name the ZyWALL uses to log into the
AD server group. The
no command clears this setting.
[no] server description
description
Sets the descriptive information for the AD server
group. You can use up to 60 printable ASCII
characters. The no command clears the setting.
[no] server group-attribute
group-attribute
Sets the name of the attribute that the ZyWALL is to
check to determine to which group a user belongs. The
value for this attribute is called a group identifier; it
determines to which group a user belongs. You can
add ext-group-user user objects to identify groups
based on these group identifier values.
For example you could have an attribute named
“memberOf” with values like “sales”, “RD”, and
“management”. Then you could also create an ext-
group-user user object for each group. One with
“sales” as the group identifier, another for “RD” and a
third for “management”. The
no command clears the
setting.
[no] server host ad_server Enter the IP address (in dotted decimal notation) or the
domain name of an AD server to add to this group. The
no command clears this setting.
[no] server password password Sets the bind password (up to 15 alphanumerical
characters). The
no command clears this setting.
Przeglądanie stron 253
1 2 ... 249 250 251 252 253 254 255 256 257 258 259 ... 385 386

Komentarze do niniejszej Instrukcji

Brak uwag