Use attribute-map to specify the LDAP attribute map in an LDAP scheme.

Use undo attribute-map to restore the default.


attribute-map map-name

undo attribute-map


An LDAP scheme does not use an LDAP attribute map.


LDAP scheme view

Predefined user roles




map-name: Specifies an LDAP attribute map by its name, a case-insensitive string of 1 to 31 characters.

Usage guidelines

When the LDAP scheme used for authorization contains an LDAP attribute map, the device converts server-assigned LDAP attributes to device-recognizable AAA attributes based on the mapping entries.

You can specify only one LDAP attribute map in an LDAP scheme. If you execute this command multiple times, the most recent configuration takes effect.

If you specify another attribute map or change the mapping entries, the new settings are effective only on the LDAP authorization that occurs after your operation.


# Specify LDAP attribute map map1 in LDAP scheme test.

<Sysname> system-view
[Sysname] ldap scheme test
[Sysname-ldap-test] attribute-map map1

Related commands

display ldap-scheme

ldap attribute-map