Removing an LDAP attribute for certificate authorization using the CLI
Print
Copy page Copy as Markdown for LLMs View as Markdown View the page as plain text
Open in ChatGPT Ask ChatGPT about this page Open in Claude Ask Claude about this page Prev Next Use the CLI commands in this section to remove an LDAP search filter for certificate authorization.
To remove an LDAP search filter for certificate authorization:
Go to CLI configuration mode.
hostname > enable hostname # configure terminal Remove the LDAP search filter.
hostname (config) # no aaa authorization certificate map-ldap search-filter Verify the status of the LDAP search filter.
hostname (config) # show aaa authorization certificate Certificate based authorization settings: LDAP enabled : yes LDAP Match Attribute : uid Certificate field to match : x509-cert-subject LDAP Search Filter : Not Configured #160; Username override : no Save your changes.
hostname (config) # write memory
Was this article helpful?
Yes No
Related articles
Network Security (NX) > Common Security Platform Product Docs > System Security Guide Release 2026.1 > Authentication > Common Access Card (CAC) for certificate authentication > Configuring LDAP for authorization
Network Security (NX) > Common Security Platform Product Docs > System Security Guide Release 2026.1 > Authentication > Common Access Card (CAC) for certificate authentication > Configuring the user attributes for certificate authentication
Intrusion Prevention System (IPS) > Network Detection and Response (NDR) > NDR 4.x > Network Detection and Response Product Guide 4.x > Appendices > Common Access Card (CAC) for certificate authentication
Intrusion Prevention System (IPS) > Network Detection and Response (NDR) > NDR 4.x > Network Detection and Response Product Guide 4.x > User management and authentication > Configuring authentication on the CLI