When configuring LDAP as an AAA method, what is the primary role of the "Base DN" (Distinguished Name)?

Question

Options

• AIt specifies the IP address of the LDAP server.
• BIt identifies the organizational unit from which the LDAP search begins.
• CIt defines the group to which users will be assigned upon successful authentication.
• DIt contains the shared secret used for secure communication between the F5 BIG-IP APM and the

• A
  8% (2)
• B
  88% (23)
• D
  4% (1)

Explanation

Base DN defines the starting point within the LDAP directory tree where the server begins searching for user entries - for example, dc=company,dc=com or ou=Users,dc=company,dc=com - making B correct. Option A is wrong because the LDAP server address is configured separately as a hostname or IP in the server connection settings, not in the Base DN. Option C is incorrect because group assignment after authentication is handled by role-mapping rules or group attributes, not the Base DN. Option D confuses Base DN with a shared secret, which belongs to RADIUS configuration, not LDAP (LDAP uses bind credentials instead).

Memory tip: Think of Base DN as the "home address" in your directory tree - it tells the LDAP search engine where to start looking, just like a street address narrows down where to deliver a package.

No community discussion yet for this question.