Enabling or disabling the LDAP server for certificate authorization using the CLI

Use the CLI commands in this section to enable or disable the LDAP server that is used to authorize users that are already authenticated using the X.509 certificate.

To enable the LDAP server for certificate authorization:

Go to CLI configuration mode.

hostname > enable
hostname # configure terminal

Enable the LDAP server to map a remote user to a local user account for certificate-based authentication.
```
hostname (config) # aaa authorization certificate map-ldap enable
```

Verify the status of the LDAP server.

hostname (config) # show aaa authorization certificate

Certificate based authorization settings:

  LDAP enabled                     : yes

  .....

Save your changes.
```
hostname (config) # write memory
```

To disable the LDAP server for authorization:

Go to CLI configuration mode.

hostname > enable

hostname # configure terminal

Disable the LDAP server that is used for authorization.

hostname (config) # no aaa authorization certificate map-ldap enable

Verify the status of the LDAP server.

hostname (config) # show aaa authorization certificate

Certificate based authorization settings:

  LDAP enabled                     : no

  .....

Save your changes.
```
hostname (config) # write memory
```