ldapGroupFilter

LENOVO-XCC-MIB · .1.3.6.1.4.1.19046.11.1.3.4.2.6.11
MIB view Table view

Object

scalar mandatory OctetString 
This filter is used for group authentication. It specifies what group or 
groups that this MM belongs to. If left blank, group authentication is 
disabled. Otherwise, group authentication will be performed against the 
filter. The filter can be a specific group name (eg. IMMWest), a wildcard (*) 
which matches everything, or a wildcard with a prefix (eg. XCC*). The default 
filter is XCC*. 
After user authentication, group authentication will take place, whereby an 
attempt will be made to match the group or groups (that the user belongs to) 
to the group filter defined here. If there is no match, the user will not pass 
authentication and will be blocked. If there is a match, the login permissions 
for the user will be retrieved from the matched group(s), unless the user 
already has login permissions assigned directly from the user record retrieved 
from the LDAP server.

Context

MIB
LENOVO-XCC-MIB
OID
.1.3.6.1.4.1.19046.11.1.3.4.2.6.11
Type
scalar
Access
readonly
Status
mandatory
Parent
ldapClientCfg
Siblings
22

Syntax

OctetString

Values & Constraints

Object Constraints
range: 0-511

Related Objects

Sibling Objects
ObjectTypeSyntaxOID
ldapServer1NameOrIPAddress mandatory
A NULL terminated 64 byte string that contains the LDAP server host name or IP address (a.b.c.d).
scalarOctetString.1.3.6.1.4.1.19046.11.1.3.4.2.6.1
ldapBindingMethod mandatory
On initial binds to the LDAP server during user authentication, there are three options: Anonymous authentication: Bind attempt is made without a client DN or password. If the b…
scalarEnumeration.1.3.6.1.4.1.19046.11.1.3.4.2.6.12
ldapClientAuthenticationDN mandatory
The initial bind to the LDAP server during user authentication can be performed with anonymous authentication, client based authentication, or UPN. The client based option requi…
scalarOctetString.1.3.6.1.4.1.19046.11.1.3.4.2.6.13
ldapRoleBasedSecurityEnabled mandatory
A value of true for RoleBasedSecurityEnabled indicates enhanced will be used by the service processor. A value of false for RoleBasedSecurityEnabled indicates the legacy bit mas…
scalarEnumeration.1.3.6.1.4.1.19046.11.1.3.4.2.6.15
ldapServerTargetName mandatory
When administrator chooses Enhanced Role Based Security authentication model, he can associate one XCC with one managed target object in Snap-in (one tool to configure LDAP use…
scalarOctetString.1.3.6.1.4.1.19046.11.1.3.4.2.6.16
ldapUIDsearchAttribute mandatory
When the binding method selected is Anonymous authentication or Client authentication, the initial bind to the LDAP server is followed by a search request aimed at retrieving sp…
scalarOctetString.1.3.6.1.4.1.19046.11.1.3.4.2.6.17
ldapGroupSearchAttribute mandatory
When the MM Group Filter name is configured, it is necessary to retrieve from the LDAP server the list of groups that a particular user belongs to. This is required to do group …
scalarOctetString.1.3.6.1.4.1.19046.11.1.3.4.2.6.18
ldapLoginPermissionAttribute mandatory
When a user successfully authenticates via a LDAP server, it is necessary to retrieve the login permissions for this user. In order to retrieve these permissions, the search fil…
scalarOctetString.1.3.6.1.4.1.19046.11.1.3.4.2.6.19
ldapServer1PortNumber mandatory
LDAP server port number.
scalarInteger32.1.3.6.1.4.1.19046.11.1.3.4.2.6.2
ldapUseDNSOrPreConfiguredServers mandatory
The MM contains a Version 2.0 LDAP Client that may be configured to provide user authentication through one or more LDAP servers. The LDAP server(s) to be used for authenticatio…
scalarEnumeration.1.3.6.1.4.1.19046.11.1.3.4.2.6.20
ldapDomainSource mandatory
The DNS SRV request sent to the DNS server must specify a domain name. The LDAP client will determine where to get this domain name based on one of the following three options: …
scalarEnumeration.1.3.6.1.4.1.19046.11.1.3.4.2.6.21
ldapForestName mandatory
In order to discover Global Catalogs (GC), the forest name must be configured in the ForestName property. The Global Catalogs are required for users who belong to universal grou…
scalarOctetString.1.3.6.1.4.1.19046.11.1.3.4.2.6.22
ldapAuthCfg mandatory
If ldapAuthCfg is set to 0, LDAP server is used to authenticate and authorize users. If it is set to 1, LDAP server is only used to authenticate users. Note:LDAP Authen…
scalarEnumeration.1.3.6.1.4.1.19046.11.1.3.4.2.6.23
ldapSearchDomain mandatory
This parameter may be used as the domain name in the DNS SRV request, depending on how the Domain Source parameter is configured.
scalarOctetString.1.3.6.1.4.1.19046.11.1.3.4.2.6.24
ldapServiceName mandatory
The DNS SRV request sent to the DNS server must also specify a service name. The configured value will be used for this purpose. If left blank, the default value used is 'ldap'.…
scalarOctetString.1.3.6.1.4.1.19046.11.1.3.4.2.6.25
ldapServer2NameOrIPAddress mandatory
A NULL terminated 64 byte string that contains the LDAP server host name or IP address (a.b.c.d).
scalarOctetString.1.3.6.1.4.1.19046.11.1.3.4.2.6.3
ldapServer2PortNumber mandatory
LDAP server port number.
scalarInteger32.1.3.6.1.4.1.19046.11.1.3.4.2.6.4
ldapServer3NameOrIPAddress mandatory
A NULL terminated 64 byte string that contains the LDAP server host name or IP address (a.b.c.d).
scalarOctetString.1.3.6.1.4.1.19046.11.1.3.4.2.6.5
ldapServer3PortNumber mandatory
LDAP server port number.
scalarInteger32.1.3.6.1.4.1.19046.11.1.3.4.2.6.6
ldapServer4NameOrIPAddress mandatory
A NULL terminated 64 byte string that contains the LDAP server host name or IP address (a.b.c.d).
scalarOctetString.1.3.6.1.4.1.19046.11.1.3.4.2.6.7
ldapServer4PortNumber mandatory
LDAP server port number.
scalarInteger32.1.3.6.1.4.1.19046.11.1.3.4.2.6.8
ldapRootDN mandatory
Distinguished Name for root entry of directory tree. An example might look like dn=foobar,dn=com.
scalarOctetString.1.3.6.1.4.1.19046.11.1.3.4.2.6.9