This group configures Generic LDAP Role group descriptions and defines the CMC privileges that LDAP–authenticatedusers are granted.cfgLDAPRoleGroup is indexed, containing instances numbered from 1 to 5. Each object instance consists of a pair ofproperties:• cfgLDAPRoleGroupDN: an LDAP distinguished name (DN)• cfgLDAPRoleGroupPrivilege: a CMC privilege mapEach LDAP–authenticated user assumes the total set of CMC privileges assigned to the matching LDAP distinguishednames that the user belongs to.That is, if the user belongs to multiple role group DNs, the user receives all associated privileges for those DNs.The following sections provide information about the objects in the cfgLdapRoleGroup group.cfgLdapRoleGroupDN (Read/Write)Description This is the Domain Name of the group in this index.For CMC, configure the LDAP distinguished name (DN) forthe role group instance.Legal Values String. Maximum length = 1024Default NoneExampleracadm getconfig -g cfgLDAPRoleGroup -o cfgLDAPRoleGroupDN-i 1 cn=everyone,ou=groups,dc=openldap,dc=comcfgLdapRoleGroupPrivilege (Read/Write)Description A bit–mask defining the privileges associated with thisparticular group.Legal Values 0x00000000 to 0x000001ffDefault 0x000Exampleracadm getconfig -g cfgLDAPRoleGroup -o cfgLDAPRoleGroupPrivilege-i 1 0x0cfgLocationThis group defines objects that support physical location properties. Use this object with the getconfig or configsubcommands.To use this object property, you must have the Chassis Configuration Administrator privilege.cfgLocationDatacenter (Read/Write)Description Indicates DataCenter name.Legal Values String of up to 128 ASCII characters133
