base-distinguished-name



base-distinguished-name base-distinguished-name;



[edit access ldap-options],
[edit access profile profile-name ldap-options]

Statement introduced in Release 8.5 of JUNOS software.

Specify the base distinguished name (DN), which can be used in one of the following ways:

If you are using the assemble statement so that the user's distinguished name is being assembled, the base distinguished name is appended to a username to generate the user's distinguished name. The resulting distinguished name is used in the LDAP bind call.
If you are using the search statement so that the user's distinguished name is found by a search, the search is restricted to the subtree of the base distinguished name.

This statement is supported on J-series and SRX-series devices.

base-distinguished-name—Series of basic properties that define the user. For example in the base distinguished name o=juniper, c=us, where c stands for country, and o for organization.

For configuration instructions and examples, see the JUNOS Software Security Configuration Guide.

access—To view this statement in the configuration.

access-control—To add this statement to the configuration.