Overview#
LdapInterfaces is a AttributeType with the OID valueLDAP Attribute Definition#
The LdapInterfaces AttributeTypes is defined as:- OID of 2.16.840.1.113719.1.27.4.79
- NAME: LdapInterfaces
- DESC: A multi-valued SYN_CI_STRING attribute used to store LDAP URLs on which LDAP server listens (on both cleartext and secure ports).
- OBSOLETE flag (only if present)
- EQUALITY:
- ORDERING:
- SYNTAX: 1.3.6.1.4.1.1466.115.121.1.15
- UPPERBOUND: 64512
- USAGE: UserApplications
- Extended Flags:
- Used as MUST in:
- Used as MAY in:
Ldapconfig LdapInterfaces (eDirectory)#
LdapInterfaces is useful in configuring EDirectory Multiple Instance that require each instance of the eDirectory server to listen on a specific interface. LdapInterfaces can be configured with the IP addresses and port numbers in the LDAP URL format. The LDAP server listens on these IP addresses and ports.
The following are examples for IPv4 and IPv6 listeners.
- ldap://192.168.1.1:389 - To specify for IPv4 specific address on clear text port - ldaps://192.168.2.1:636 - To specify for IPv4 specific address on secure port - ldap://[2015::3]:389 - To specify for IPv6 specific address on clear text port - ldaps://[2015::3]:636 - To specify for IPv6 specific address on secure port - ldap://[::]:389 - To specify for IPv6 unspecified address on clear text port - ldaps://[::]:636 - To specify for IPv6 unspecified address on secure port
The LDAP Enable TCP, LDAP Enable TLS, LDAP TCP Port, and LDAP TLS Port attributes are not populated if a new server is configured from eDirectory 8.8.8.0 (20801.46). The LdapInterfaces attribute values corresponding to the ports selected for ldap and ldaps during configuration are populated. For example, ldap://:389, ldaps://:636
By default, only IPv4 interface values are added to the LdapInterfaces attribute.
During upgrade, eDirectory is triggered to delete the LDAP Enable TCP, LDAP Enable TLS, LDAP TCP Port, LDAP TLS Port attributes. It populates corresponding values of these attributes in ldapInterface. The ldapconfig set command takes comma separated values and replaces all the existing values with the new values.