OID reference

ldapGroupFilter

1.3.6.1.4.1.2.3.51.2.4.9.3.6.9

Description

This filter is used for group authentication. It specifies what group or groups that this MM belongs to. If left blank, group authentication is disabled. Otherwise, group authentication will be performed against the filter. The filter can be a specific group name (eg. RSAWest), a wildcard (*) which matches everything,…

Full description and source information

Identification

Identifier and names

Parent
1.3.6.1.4.1.2.3.51.2.4.9.3.6 (ldapClientCfg)
Node code
9
Node name
ldapGroupFilter
Category
SNMP management object
Numeric OID
1.3.6.1.4.1.2.3.51.2.4.9.3.6.9
URN notation
urn:oid:1.3.6.1.4.1.2.3.51.2.4.9.3.6.9
Type
OBJECT-TYPE
ASN.1, OID-IRI and named path variants
ASN.1 notation

{1 3 6 1 4 1 2 3 51 2 4 9 3 6 9}

  • {iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) ibm(2) ibmAgents(3) netfinitySupportProcessorAgent(51) bladeCenterSnmpMIB(2) configureSP(4) networkConfiguration(9) tcpProtocols(3) ldapClientCfg(6) ldapGroupFilter(9)}
  • {iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) atmMIBCompliance2(2) ibmAgents(3) netfinitySupportProcessorAgent(51) bladeCenterSnmpMIB(2) configureSP(4) networkConfiguration(9) tcpProtocols(3) ldapClientCfg(6) ldapGroupFilter(9)}
  • {iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprises(1) ibm(2) ibmAgents(3) netfinitySupportProcessorAgent(51) bladeCenterSnmpMIB(2) configureSP(4) networkConfiguration(9) tcpProtocols(3) ldapClientCfg(6) ldapGroupFilter(9)}
  • {iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprises(1) atmMIBCompliance2(2) ibmAgents(3) netfinitySupportProcessorAgent(51) bladeCenterSnmpMIB(2) configureSP(4) networkConfiguration(9) tcpProtocols(3) ldapClientCfg(6) ldapGroupFilter(9)}
  • {iso(1) identified-organization(3) dod(6) internet(1) private(4) ldap-enterprise(1) ibm(2) ibmAgents(3) netfinitySupportProcessorAgent(51) bladeCenterSnmpMIB(2) configureSP(4) networkConfiguration(9) tcpProtocols(3) ldapClientCfg(6) ldapGroupFilter(9)}
  • {iso(1) identified-organization(3) dod(6) internet(1) private(4) ldap-enterprise(1) atmMIBCompliance2(2) ibmAgents(3) netfinitySupportProcessorAgent(51) bladeCenterSnmpMIB(2) configureSP(4) networkConfiguration(9) tcpProtocols(3) ldapClientCfg(6) ldapGroupFilter(9)}
  • {iso(1) identified-organization(3) dod(6) internet(1) private(4) vendor-objects(1) ibm(2) ibmAgents(3) netfinitySupportProcessorAgent(51) bladeCenterSnmpMIB(2) configureSP(4) networkConfiguration(9) tcpProtocols(3) ldapClientCfg(6) ldapGroupFilter(9)}
  • {iso(1) identified-organization(3) dod(6) internet(1) private(4) vendor-objects(1) atmMIBCompliance2(2) ibmAgents(3) netfinitySupportProcessorAgent(51) bladeCenterSnmpMIB(2) configureSP(4) networkConfiguration(9) tcpProtocols(3) ldapClientCfg(6) ldapGroupFilter(9)}
  • {iso(1) org(3) dod(6) internet(1) private(4) enterprise(1) ibm(2) ibmAgents(3) netfinitySupportProcessorAgent(51) bladeCenterSnmpMIB(2) configureSP(4) networkConfiguration(9) tcpProtocols(3) ldapClientCfg(6) ldapGroupFilter(9)}
  • {iso(1) org(3) dod(6) internet(1) private(4) enterprise(1) atmMIBCompliance2(2) ibmAgents(3) netfinitySupportProcessorAgent(51) bladeCenterSnmpMIB(2) configureSP(4) networkConfiguration(9) tcpProtocols(3) ldapClientCfg(6) ldapGroupFilter(9)}
  • {iso(1) org(3) dod(6) internet(1) private(4) enterprises(1) ibm(2) ibmAgents(3) netfinitySupportProcessorAgent(51) bladeCenterSnmpMIB(2) configureSP(4) networkConfiguration(9) tcpProtocols(3) ldapClientCfg(6) ldapGroupFilter(9)}
  • {iso(1) org(3) dod(6) internet(1) private(4) enterprises(1) atmMIBCompliance2(2) ibmAgents(3) netfinitySupportProcessorAgent(51) bladeCenterSnmpMIB(2) configureSP(4) networkConfiguration(9) tcpProtocols(3) ldapClientCfg(6) ldapGroupFilter(9)}
  • {iso(1) org(3) dod(6) internet(1) private(4) ldap-enterprise(1) ibm(2) ibmAgents(3) netfinitySupportProcessorAgent(51) bladeCenterSnmpMIB(2) configureSP(4) networkConfiguration(9) tcpProtocols(3) ldapClientCfg(6) ldapGroupFilter(9)}
  • {iso(1) org(3) dod(6) internet(1) private(4) ldap-enterprise(1) atmMIBCompliance2(2) ibmAgents(3) netfinitySupportProcessorAgent(51) bladeCenterSnmpMIB(2) configureSP(4) networkConfiguration(9) tcpProtocols(3) ldapClientCfg(6) ldapGroupFilter(9)}
  • {iso(1) org(3) dod(6) internet(1) private(4) vendor-objects(1) ibm(2) ibmAgents(3) netfinitySupportProcessorAgent(51) bladeCenterSnmpMIB(2) configureSP(4) networkConfiguration(9) tcpProtocols(3) ldapClientCfg(6) ldapGroupFilter(9)}
  • {iso(1) org(3) dod(6) internet(1) private(4) vendor-objects(1) atmMIBCompliance2(2) ibmAgents(3) netfinitySupportProcessorAgent(51) bladeCenterSnmpMIB(2) configureSP(4) networkConfiguration(9) tcpProtocols(3) ldapClientCfg(6) ldapGroupFilter(9)}
  • Additional combinations skipped.
OID-IRI notation
  • /1/3/6/1/4/1/2/3/51/2/4/9/3/6/9
  • /ISO/Identified-Organization/6/1/4/1/2/3/51/2/4/9/3/6/9
  • /ISO/3/6/1/4/1/2/3/51/2/4/9/3/6/9
Named path variants
  • /iso/identified-organization/dod/internet/private/enterprise/ibm/ibmAgents/netfinitySupportProcessorAgent/bladeCenterSnmpMIB/configureSP/networkConfiguration/tcpProtocols/ldapClientCfg/ldapGroupFilter
  • /iso/identified-organization/dod/internet/private/enterprise/IBM/ibmAgents/netfinitySupportProcessorAgent/bladeCenterSnmpMIB/configureSP/networkConfiguration/tcpProtocols/ldapClientCfg/ldapGroupFilter
  • /iso/identified-organization/dod/internet/private/enterprise/atmMIBCompliance2/ibmAgents/netfinitySupportProcessorAgent/bladeCenterSnmpMIB/configureSP/networkConfiguration/tcpProtocols/ldapClientCfg/ldapGroupFilter
  • /iso/identified-organization/dod/internet/private/enterprises/ibm/ibmAgents/netfinitySupportProcessorAgent/bladeCenterSnmpMIB/configureSP/networkConfiguration/tcpProtocols/ldapClientCfg/ldapGroupFilter
  • /iso/identified-organization/dod/internet/private/enterprises/IBM/ibmAgents/netfinitySupportProcessorAgent/bladeCenterSnmpMIB/configureSP/networkConfiguration/tcpProtocols/ldapClientCfg/ldapGroupFilter
  • /iso/identified-organization/dod/internet/private/enterprises/atmMIBCompliance2/ibmAgents/netfinitySupportProcessorAgent/bladeCenterSnmpMIB/configureSP/networkConfiguration/tcpProtocols/ldapClientCfg/ldapGroupFilter
  • /iso/identified-organization/dod/internet/private/ldap-enterprise/ibm/ibmAgents/netfinitySupportProcessorAgent/bladeCenterSnmpMIB/configureSP/networkConfiguration/tcpProtocols/ldapClientCfg/ldapGroupFilter
  • /iso/identified-organization/dod/internet/private/ldap-enterprise/IBM/ibmAgents/netfinitySupportProcessorAgent/bladeCenterSnmpMIB/configureSP/networkConfiguration/tcpProtocols/ldapClientCfg/ldapGroupFilter
  • /iso/identified-organization/dod/internet/private/ldap-enterprise/atmMIBCompliance2/ibmAgents/netfinitySupportProcessorAgent/bladeCenterSnmpMIB/configureSP/networkConfiguration/tcpProtocols/ldapClientCfg/ldapGroupFilter
  • /iso/identified-organization/dod/internet/private/vendor-objects/ibm/ibmAgents/netfinitySupportProcessorAgent/bladeCenterSnmpMIB/configureSP/networkConfiguration/tcpProtocols/ldapClientCfg/ldapGroupFilter
  • /iso/identified-organization/dod/internet/private/vendor-objects/IBM/ibmAgents/netfinitySupportProcessorAgent/bladeCenterSnmpMIB/configureSP/networkConfiguration/tcpProtocols/ldapClientCfg/ldapGroupFilter
  • /iso/identified-organization/dod/internet/private/vendor-objects/atmMIBCompliance2/ibmAgents/netfinitySupportProcessorAgent/bladeCenterSnmpMIB/configureSP/networkConfiguration/tcpProtocols/ldapClientCfg/ldapGroupFilter
  • /iso/org/dod/internet/private/enterprise/ibm/ibmAgents/netfinitySupportProcessorAgent/bladeCenterSnmpMIB/configureSP/networkConfiguration/tcpProtocols/ldapClientCfg/ldapGroupFilter
  • /iso/org/dod/internet/private/enterprise/IBM/ibmAgents/netfinitySupportProcessorAgent/bladeCenterSnmpMIB/configureSP/networkConfiguration/tcpProtocols/ldapClientCfg/ldapGroupFilter
  • /iso/org/dod/internet/private/enterprise/atmMIBCompliance2/ibmAgents/netfinitySupportProcessorAgent/bladeCenterSnmpMIB/configureSP/networkConfiguration/tcpProtocols/ldapClientCfg/ldapGroupFilter
  • /iso/org/dod/internet/private/enterprises/ibm/ibmAgents/netfinitySupportProcessorAgent/bladeCenterSnmpMIB/configureSP/networkConfiguration/tcpProtocols/ldapClientCfg/ldapGroupFilter
  • Additional combinations skipped.

SNMP properties

Value type
OCTET STRING
Maximum access defined by MIB
read-write
Status in MIB
mandatory

Definitions may combine these properties differently.

Compare 2 source variants

Variant 1 — IBM MIB copies (LibreNMS/Observium Community), IBM MIB copies (MibBrowser.online)

Value type
OCTET STRING
Maximum access defined by MIB
read-write
Status in MIB
mandatory
Allowed size (octets)
0–511

Variant 2 — Circitor

Value type
OCTET STRING
Maximum access defined by MIB
read-write
Status in MIB
mandatory
Allowed size (octets)
0–64

Using this OID with SNMP

At least one MIB declaration places this object in a scalar group. A scalar instance uses the suffix .0.

snmpget [connection options] DEVICE .1.3.6.1.4.1.2.3.51.2.4.9.3.6.9.0

Replace the placeholders with your connection and authentication options. Available permissions and device support can differ from the MIB.

Properties come from available MIB definitions. Actual device support and access can differ. See source records below for original files and qualifications.

The displayed source records contain one distinct definition. Compare its source records.

ldapGroupFilter     OBJECT-TYPE
                      SYNTAX  OCTET STRING (SIZE(0..511))
                      ACCESS  read-write
                      STATUS  mandatory
                      DESCRIPTION
                      "This filter is used for group authentication. It specifies what group or
                      groups that this MM belongs to. If left blank, group authentication is
                      disabled. Otherwise, group authentication will be performed against the
                      filter. The filter can be a specific group name (e.g. RSAWest), a wildcard (*)
                      which matches everything, or a wildcard with a prefix (e.g. RSA*). The default
                      filter is RSA*.
                      After user authentication, group authentication will take place, whereby an
                      attempt will be made to match the group or groups (that the user belongs to)
                      to the group filter defined here. If there is no match, the user will not pass
                      authentication and will be blocked. If there is a match, the login permissions
                      for the user will be retrieved from the matched group(s), unless the user
                      already has login permissions assigned directly from the user record retrieved
                      from the LDAP server."
                      ::= { ldapClientCfg 9 }

Meaning

Descriptions

2 unique

Identical descriptions are grouped. Different wording and device-specific notes are retained.

Description 1

This filter is used for group authentication. It specifies what group or
groups that this MM belongs to. If left blank, group authentication is
disabled. Otherwise, group authentication will be performed against the
filter. The filter can be a specific group name (eg. RSAWest), a wildcard (*)
which matches everything, or a wildcard with a prefix (eg. RSA*). The default
filter is RSA*.
After user authentication, group authentication will take place, whereby an
attempt will be made to match the group or groups (that the user belongs to)
to the group filter defined here. If there is no match, the user will not pass
authentication and will be blocked. If there is a match, the login permissions
for the user will be retrieved from the matched group(s), unless the user
already has login permissions assigned directly from the user record retrieved
from the LDAP server.
Sources for this description

Circitor

Parsed from BLADE-MIB.mib · BLADE-MIB

Source file: Download BLADE-MIB — archive MIB indexed for IBM (https://w3.ibm.com/standards ) · Publisher's file IBM (https://w3.ibm.com/standards ) archived MIB undated archived revision

Vendor MIB copy from the MibBrowser.online archive. IBM (https://w3.ibm.com/standards ) support.

Source file: Download BLADE-MIB.mib

Browse all files from Circitor

Description 2

This filter is used for group authentication. It specifies what group or groups that this MM belongs to. If left blank, group authentication is disabled. Otherwise, group authentication will be performed against the filter. The filter can be a specific group name (e.g. RSAWest), a wildcard (*) which matches everything, or a wildcard with a prefix (e.g. RSA*). The default filter is RSA*. After user authentication, group authentication will take place, whereby an attempt will be made to match the group or groups (that the user belongs to) to the group filter defined here. If there is no match, the user will not pass authentication and will be blocked. If there is a match, the login permissions for the user will be retrieved from the matched group(s), unless the user already has login permissions assigned directly from the user record retrieved from the LDAP server.

Sources for this description

IBM MIB copies (LibreNMS/Observium Community)IBM MIB copies (MibBrowser.online)

See 1 matching source record

Evidence

Source records

1 records

Matching descriptions are grouped; open a group to compare definitions and supporting files.

Records for description 2IBM MIB copies (LibreNMS/Observium Community), IBM MIB copies (MibBrowser.online)1 record · 3 sources

Description 2

ldapGroupFilter · mandatoryIBM MIB copies (LibreNMS/Observium Community), IBM MIB copies (MibBrowser.online)3 sources

Status in source: mandatory.

Names: ldapGroupFilter

Technical details
{
  "smi_kind": "OBJECT-TYPE",
  "definition": [
    "ldapGroupFilter",
    "OBJECT-TYPE",
    "SYNTAX",
    "OCTET",
    "STRING",
    "(",
    "SIZE",
    "(",
    "0",
    ".",
    ".",
    "511",
    ")",
    ")",
    "ACCESS",
    "read-write",
    "STATUS",
    "mandatory",
    "DESCRIPTION",
    "\"This filter is used for group authentication. It specifies what group or groups that this MM belongs to. If left blank, group authentication is disabled. Otherwise, group authentication will be performed against the filter. The filter can be a specific group name (e.g. RSAWest), a wildcard (*) which matches everything, or a wildcard with a prefix (e.g. RSA*). The default filter is RSA*. After user authentication, group authentication will take place, whereby an attempt will be made to match the group or groups (that the user belongs to) to the group filter defined here. If there is no match, the user will not pass authentication and will be blocked. If there is a match, the login permissions for the user will be retrieved from the matched group(s), unless the user already has login permissions assigned directly from the user record retrieved from the LDAP server.\"",
    "::=",
    "{",
    "ldapClientCfg",
    "9",
    "}"
  ],
  "syntax_tree": [
    [
      "SimpleSyntax",
      "OCTET STRING",
      [
        "octetStringSubType",
        [
          [
            0,
            511
          ]
        ]
      ]
    ],
    null,
    [
      "MaxAccessPart",
      "read-write"
    ],
    [
      "Status",
      "mandatory"
    ],
    [
      "DESCRIPTION",
      "This filter is used for group authentication. It specifies what group or groups that this MM belongs to. If left blank, group authentication is disabled. Otherwise, group authentication will be performed against the filter. The filter can be a specific group name (e.g. RSAWest), a wildcard (*) which matches everything, or a wildcard with a prefix (e.g. RSA*). The default filter is RSA*. After user authentication, group authentication will take place, whereby an attempt will be made to match the group or groups (that the user belongs to) to the group filter defined here. If there is no match, the user will not pass authentication and will be blocked. If there is a match, the login permissions for the user will be retrieved from the matched group(s), unless the user already has login permissions assigned directly from the user record retrieved from the LDAP server."
    ],
    null,
    null,
    null,
    null
  ]
}

Historical records

Additional source information

Information from OID Repository
Vendor: IBM
Module: BLADE-MIB

[Automatically extracted from oidview.com]
Information from Circitor
ldapGroupFilter     OBJECT-TYPE
                      SYNTAX  OCTET STRING (SIZE(0..64))
                      ACCESS  read-write
                      STATUS  mandatory
                      DESCRIPTION
                      "This filter is used for group authentication. It specifies what group or 
                      groups that this MM belongs to. If left blank, group authentication is 
                      disabled. Otherwise, group authentication will be performed against the 
                      filter. The filter can be a specific group name (eg. RSAWest), a wildcard (*) 
                      which matches everything, or a wildcard with a prefix (eg. RSA*). The default 
                      filter is RSA*. 
                      After user authentication, group authentication will take place, whereby an 
                      attempt will be made to match the group or groups (that the user belongs to) 
                      to the group filter defined here. If there is no match, the user will not pass 
                      authentication and will be blocked. If there is a match, the login permissions 
                      for the user will be retrieved from the matched group(s), unless the user 
                      already has login permissions assigned directly from the user record retrieved 
                      from the LDAP server."
                      ::= { ldapClientCfg 9 }

Registration

Registration authorities

First Registration Authority (inferred from ancestor 1.3.6.1.4.1.2)

Bob Moore

Siblings (25)

OIDNameDirect childrenDescendantsDescription
1.3.6.1.4.1.2.3.51.2.4.9.3.6.1 ldapServer1NameOrIPAddress00 A NULL terminated 64 byte string that contains the
LDAP server host name or IP address (a.b.c.d).
1.3.6.1.4.1.2.3.51.2.4.9.3.6.2 ldapServer1PortNumber00 LDAP server port number.
1.3.6.1.4.1.2.3.51.2.4.9.3.6.3 ldapServer2NameOrIPAddress00 A NULL terminated 64 byte string that contains the
LDAP server host name or IP address (a.b.c.d).
1.3.6.1.4.1.2.3.51.2.4.9.3.6.4 ldapServer2PortNumber00 LDAP server port number.
1.3.6.1.4.1.2.3.51.2.4.9.3.6.5 ldapServer3NameOrIPAddress00 A NULL terminated 64 byte string that contains the
LDAP server host name or IP address (a.b.c.d).
1.3.6.1.4.1.2.3.51.2.4.9.3.6.6 ldapServer3PortNumber00 LDAP server port number.
1.3.6.1.4.1.2.3.51.2.4.9.3.6.7 ldapRootDN00 Distinguished Name for root entry of directory tree.
An example might look like dn=foobar,dn=com.
1.3.6.1.4.1.2.3.51.2.4.9.3.6.8 ldapUserSearchBaseDN00 As part of the user authentication process, it is necessary to search
the LDAP server for one or more attributes associated with…
1.3.6.1.4.1.2.3.51.2.4.9.3.6.10 ldapBindingMethod00 On initial binds to the LDAP server during user authentication, there are
three options:
Anonymous authentication: Bind attempt i…
1.3.6.1.4.1.2.3.51.2.4.9.3.6.11 ldapClientAuthenticationDN00 The initial bind to the LDAP server during user authentication can be
performed with anonymous authentication, client based auth…
1.3.6.1.4.1.2.3.51.2.4.9.3.6.12 ldapClientAuthenticationPassword00 The client authentication password
1.3.6.1.4.1.2.3.51.2.4.9.3.6.13 ldapUIDsearchAttribute00 When the binding method selected is Anonymous authentication or Client
authentication, the initial bind to the LDAP server is fo…
1.3.6.1.4.1.2.3.51.2.4.9.3.6.14 ldapGroupSearchAttribute00 When the MM Group Filter name is configured, it is necessary to retrieve
from the LDAP server the list of groups that a particul…
1.3.6.1.4.1.2.3.51.2.4.9.3.6.15 ldapLoginPermissionAttribute00 When a user successfully authenticates via a LDAP server, it is necessary
to retrieve the login permissions for this user. In or…
1.3.6.1.4.1.2.3.51.2.4.9.3.6.16 ldapUseDNSOrPreConfiguredServers00 The MM contains a Version 2.0 LDAP Client that may be configured to provide
user authentication through one or more LDAP servers…
1.3.6.1.4.1.2.3.51.2.4.9.3.6.17 ldapDomainSource00 The DNS SRV request sent to the DNS server must specify a domain name.
The LDAP client will determine where to get this domain n…
1.3.6.1.4.1.2.3.51.2.4.9.3.6.18 ldapSearchDomain00 This parameter may be used as the domain name in the DNS SRV request,
depending on how the Domain Source parameter is configured.
1.3.6.1.4.1.2.3.51.2.4.9.3.6.19 ldapServiceName00 The DNS SRV request sent to the DNS server must also specify a service name.
The configured value will be used for this purpose.…
1.3.6.1.4.1.2.3.51.2.4.9.3.6.20 ldapRBSModelCfg00
1.3.6.1.4.1.2.3.51.2.4.9.3.6.21 ldapTargetName00
1.3.6.1.4.1.2.3.51.2.4.9.3.6.22 ldapAuthCfg00
1.3.6.1.4.1.2.3.51.2.4.9.3.6.23 ldapForestName00
1.3.6.1.4.1.2.3.51.2.4.9.3.6.24 ldapDomainName00
1.3.6.1.4.1.2.3.51.2.4.9.3.6.25 ldapServer4NameOrIPAddress00
1.3.6.1.4.1.2.3.51.2.4.9.3.6.26 ldapServer4PortNumber00