Enabling or disabling the LDAP override for certificate authorization using the CLI

Use the CLI commands in this section to enable or disable the LDAP override of the username setting that was specified with the aaa authentication certificate username command.

Note

By default, the username setting in the aaa authentication certificate username command is used.

If the login is mapped to the LDAP account, an administrator can use the ldap login-attribute command to override the username setting, and instead use the username from the LDAP attribute.

To enable the LDAP override for certificate authorization:

Go to CLI configuration mode.

hostname > enable
hostname # configure terminal

Enable the LDAP override of the username setting that was specified with the aaa authentication certificate username command, and instead use the username from the LDAP attribute.
```
hostname (config) # aaa authorization certificate map-ldap username-override
```

Verify the status of the LDAP override.

hostname (config) # show aaa authorization certificate

Certificate based authorization settings:

...

  Username override          : yes

Save your changes.
```
hostname (config) # write memory
```

To disable the LDAP override for certificate-based authorization:

Go to CLI configuration mode.

hostname > enable
hostname # configure terminal

Disable the LDAP override of the username setting that was specified with the aaa authentication certificate username command.
```
hostname (config) # no aaa authorization certificate map-ldap username-override
```

Verify the status of the LDAP override.

hostname (config) # show aaa authorization certificate

Certificate based authorization settings:

...

  Username override          : no

Save your changes.
```
hostname (config) # write memory
```