Removing an LDAP attribute for certificate authorization using the CLI

Go to CLI configuration mode.

hostname > enable

hostname # configure terminal

Remove the LDAP search filter.

hostname (config) # no aaa authorization certificate map-ldap search-filter

Verify the status of the LDAP search filter.

hostname (config) # show aaa authorization certificate

Certificate based authorization settings:

  LDAP enabled               : yes

  LDAP Match Attribute       : uid

  Certificate field to match : x509-cert-subject

 LDAP Search Filter         : Not Configured

#160; Username override          : no

Save your changes.

hostname (config) # write memory