Statement introduced in Release 8.5 of Junos OS.
Specify the base distinguished name (DN), which can be used in one of the following ways:
If you are using the assemble statement so that the user's distinguished name is being assembled, the base distinguished name is appended to a username to generate the user's distinguished name. The resulting distinguished name is used in the LDAP bind call.
If you are using the search statement so that the user's distinguished name is found by a search, the search is restricted to the subtree of the base distinguished name.
base-distinguished-name—Series of basic properties that define the user. For example in the base distinguished name o=juniper, c=us, where c stands for country, and o for organization.
Required Privilege Level
access—To view this statement in the configuration.
access-control—To add this statement to the configuration.