Removing an LDAP attribute for certificate authorization using the CLI

Prev Next

Use the CLI commands in this section to remove an LDAP search filter for certificate authorization.

To remove an LDAP search filter for certificate authorization:
  1. Go to CLI configuration mode.

    hostname > enable
    hostname # configure terminal
  2. Remove the LDAP search filter.

    hostname (config) # no aaa authorization certificate map-ldap search-filter
  3. Verify the status of the LDAP search filter.

    hostname (config) # show aaa authorization certificate
    Certificate based authorization settings:
      LDAP enabled               : yes
      LDAP Match Attribute       : uid
      Certificate field to match : x509-cert-subject
     LDAP Search Filter         : Not Configured
    #160; Username override          : no
  4. Save your changes.

    hostname (config) # write memory