domainname-parse-direction
Function
The domainname-parse-direction command configures the direction in which a domain name is parsed.
The undo domainname-parse-direction command restores the default direction in which a domain name is parsed.
By default, the domain name is parsed in the AAA view from left to right, and no direction is configured in which a domain name is parsed.
Default Level
In the AAA view, the default level is management level.
In the authentication profile view, the default level is configuration level.
Usage Guidelines
Usage Scenario
In AAA implementations, users belong to different domains. A network access server (NAS) centrally manages users in a domain. During a user's login, the NAS parses the entered user name. A user is authenticated only when the user has the correct user name and domain name. When configuring an AAA scheme, run the domainname-parse-direction { left-to-right | right-to-left } command to configure the direction in which a domain name is parsed.
- If the domain-location command configures the domain name
behind the domain name delimiter:
- When left-to-right is specified, the user name is username and the domain name is dom1@dom2.
- When right-to-left is specified, the user name is username@dom1 and the domain name is dom2.
- If the domain-location command configures the domain name
before the domain name delimiter:
- When left-to-right is specified, the user name is dom1@dom2 and the domain name is username.
- When right-to-left is specified, the user name is dom2 and the domain name is username@dom1.
Precautions
If you run the domainname-parse-direction command in the AAA view, the direction in which a domain name is parsed is configured globally and the configuration takes effect for all users.
When this command is executed in the authentication profile, the configuration takes effect only after the authentication profile is bound to a VAP profile.
When the command is executed in the AAA view, the configuration takes effect for all users. When the command is executed in the authentication profile, the configuration takes effect for only the users connected to this authentication profile.
