Add an LDAP memberOf attribute to a DAP policy using the CLI

[BenHarvey39850]

Hello, 

I'm building an API that automates interactions with a cluster of Cisco ASAs.  Part of this process is creating new DAP policies that associate an LDAP group with a network ACL.  This appears to be trivial to do using the ADSM GUI ( see Step 2 of this blog post for an example), but I haven't been able to figure out how to do the same operation via the CLI, which is required for automation.   Currently we are considering manually editing the dap.XML file to achieve this, but I feel like I'm missing something and there is a simpler approach.  Thanks for your help! 

- Ben

[Dinesh Moudgil]

Note: The dap.xml file, which contains the DAP policies selection attributes, is stored in the ASA's flash. Although you can export the dap.xml file off-box, edit it (if you know about XML syntax), and re-import it back, be very careful, because you can cause ASDM to stop processing DAP records if you have misconfigured something. There is no CLI to manipulate this part of the configuration.

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/108000-dap-deploy-guide.html

Thank you,

Dinesh Moudgil