Use the lsldap command to display the details for the system-wide Lightweight Directory Access Protocol (LDAP) configuration.
Attribute | Value |
---|---|
type | LDAP server type:
|
enabled | Is native LDAP authentication enabled? |
error_sequence_number | Sequence number of non-fixed LDAP configuration error log |
username | Binding username or distinguished name (or blank if there is none) |
security | Type of security in use:
|
user_attribute | LDAP attribute representing user login |
group_attribute | LDAP attribute representing user group membership |
audit_log_attribute | LDAP attribute representing user name in audit log |
auth_cache_minutes | Period (in minutes) for which to cache session details |
nested_group_search | Handling of nested groups:
|
lsldap -delim :
The resulting output:
type:ad enabled:yes error_sequence_number:12 username:admin@company.com security:tls user_attribute:sAMAccountName group_attribute:memberOf audit_log_attribute:userPrincipalName auth_cache_minutes:10 nested_group_search:off