Symptom
When configuring LDAP authentication on DCNM 7.1.1 follow the format 'CN=$userid, etc' is incorrect and will cause authentication to fail.
Conditions
Incorrect filter settings cause DCNM LDAP Authentication to fail.
Workaround
Default example configuration is currently:
Host: ds.cisco.com
Port: 389
[ ] SSL Enabled
Base DN: DC=cisco,DC=com
Filter: CN=$userid,OU=Employees,OU=Cisco Users
Determine Role By: [ ] Attribute [x] Admin Group Map
Role Admin Group: dcnm
Map To DCNM Role: network-admin,sme-admin
Suggest changing to the following:
Host: ds.cisco.com
Port: 389
[ ] SSL Enabled
Base DN: OU=Cisco Users,OU=Employees,DC=cisco,DC=com
Filter: $userid@cisco.com
Determine Role By: [ ] Attribute [x] Admin Group Map
Role Admin Group: dcnm
Map To DCNM Role: network-admin,sme-admin