No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


FusionServer Tools 2.0 uREST User Guide 16

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Setting LDAP Group Information

Setting LDAP Group Information


Set LDAP group information.


./urest -H HOST -p PORT -U USERNAME -P PASSWORD setldapgroup -I {1,2,3,4,5,6} -G {0,1,2,3,4} -N GNAME -D GDOMAIN -RO {CommonUser,Operator,Administrator,CustomRole1,CustomRole2,CustomRole3,CustomRole4} -RU [GRULE [GRULE ...]] -i [GFACE [GFACE ...]]






iBMC IP address or domain name. It is a mandatory parameter. If an IPv6 address is used, the IPv6 address must be included in square brackets, such as [1001::1001].



Port number. The default value is 443. It is an optional parameter.

Enter the port number if the default value 443 is not used.


iBMC user name. It is a mandatory parameter.



Password of the iBMC user. It is a mandatory parameter.


-I {1,2,3,4,5,6}

Domain controller number. It is a mandatory parameter.

1 to 6

-G {0,1,2,3,4}

LDAP group number. It is a mandatory parameter.

0 to 4


LDAP group name. It is an optional parameter.



LDAP group domain name. It is an optional parameter.

The format is CN=A,OU=B,DC=C. The value must contain CN and DC values, such as CN=1,DC=2.

The value of CN must be the same as the LDAP group name.

-RO {CommonUser,Operator,Administrator,CustomRole1,CustomRole2,CustomRole3,CustomRole4,NoAccess}

iBMC portal access permission assigned to the group domain.

The value can be one of the following: CommonUser, Operator, Administrator, CustomRole1, CustomRole2, CustomRole3, and CustomRole4


Login rule. It is an optional parameter.

Range: Rule1, Rule2, and Rule3

The value can be empty, one rule, two rules, or three rules, such as Rule1, Rule2 Rule3, or Rule1 Rule2 Rule3.

-i [GFACE [GFACE ...]]

Login interface. It is an optional parameter.

Range: Web, SSH, and Redfish

The value can be empty, one interface, two interfaces, or three interfaces, such as Web, Web Redfish, or Web SSH Redfish.

Usage Guidelines



Obtain help information.

[root@localhost bin]# ./urest -H -U root -P ****** setldapgroup -h 
usage: urest setldapgroup [-h] -I {1,2,3,4,5,6} -G {0,1,2,3,4} [-N GNAME] 
                               [-D GDOMAIN] 
                               [-RO {CommonUser,Operator,Administrator,CustomRole1,CustomRole2,CustomRole3,CustomRole4,NoAccess}] 
                               [-RU [{Rule1,Rule2,Rule3} [{Rule1,Rule2,Rule3} ...]]] 
                               [-i [{Web,SSH,Redfish} [{Web,SSH,Redfish} ...]]] 

optional arguments: 
  -h, --help            show this help message and exit 
  -I {1,2,3,4,5,6}      LDAP controller ID 
  -G {0,1,2,3,4}        group ID 
  -N GNAME              group name 
  -D GDOMAIN            group domain, example: CN=A,OU=B,DC=C 
  -RO {CommonUser,Operator,Administrator,CustomRole1,CustomRole2,CustomRole3,CustomRole4,NoAccess} 
                        group role 
  -RU [{Rule1,Rule2,Rule3} [{Rule1,Rule2,Rule3} ...]] 
                        group rule, the value can be empty or a single rule, 
                        or be a two-rule or three-rule combination. example 
                        value: 'Rule1','Rule2 Rule3' or 'Rule1 Rule2 Rule3' 
  -i [{Web,SSH,Redfish} [{Web,SSH,Redfish} ...]] 
                        group interface, the value can be empty or a single 
                        login inteface, or be a two-interface or three- 
                        interface combination, example value: 'Web', 'Web 
                        Redfish' or 'Web SSH Redfish'

Set LDAP group information.

[root@localhost bin]# ./urest -H -U ****** -P ****** setldapgroup -I 1 -G 1 -N huawei -D CN=1,DC=2 -RO Administrator -RU Rule1 -i Web 
Success: successfully completed request
Updated: 2020-02-13

Document ID: EDOC1000176182

Views: 119888

Downloads: 586

Average rating:
This Document Applies to these Products

Related Version

Related Documents

Previous Next