Mercurial > prosody-modules

comparison mod_auth_ldap/README.markdown @ 1987:6d7699eda594

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
mod_auth_ldap: Change default of ldap_scope from onelevel to subtree which seems to match many deployments
author Kim Alvefur <zash@zash.se>
date Sun, 20 Dec 2015 21:55:49 +0100
parents 8435e1766054
children 2c6d84fb82d9
comparison
equal deleted inserted replaced
1986:9e268b4fba08 1987:6d7699eda594
35 ldap\_base LDAP base directory which stores user accounts **Required field** 35 ldap\_base LDAP base directory which stores user accounts **Required field**
36 ldap\_server Space-separated list of hostnames or IPs, optionally with port numbers (e.g. "localhost:8389") `"localhost"` 36 ldap\_server Space-separated list of hostnames or IPs, optionally with port numbers (e.g. "localhost:8389") `"localhost"`
37 ldap\_rootdn The distinguished name to auth against `"" (anonymous)` 37 ldap\_rootdn The distinguished name to auth against `"" (anonymous)`
38 ldap\_password Password for rootdn `""` 38 ldap\_password Password for rootdn `""`
39 ldap\_filter Search filter, with `$user` and `$host` substituded for user- and hostname `"(uid=$user)"` 39 ldap\_filter Search filter, with `$user` and `$host` substituded for user- and hostname `"(uid=$user)"`
40 ldap\_scope Search scope. other values: "base" and "subtree" `"onelevel"` 40 ldap\_scope Search scope. other values: "base" and "onelevel" `"subtree"`
41 ldap\_tls Enable TLS (StartTLS) to connect to LDAP (can be true or false). The non-standard 'LDAPS' protocol is not supported. `false` 41 ldap\_tls Enable TLS (StartTLS) to connect to LDAP (can be true or false). The non-standard 'LDAPS' protocol is not supported. `false`
42 ldap\_mode How passwords are validated. `"bind"` 42 ldap\_mode How passwords are validated. `"bind"`
43 43
44 **Note:** lua-ldap reads from `/etc/ldap/ldap.conf` and other files like 44 **Note:** lua-ldap reads from `/etc/ldap/ldap.conf` and other files like
45 `~prosody/.ldaprc` if they exist. Users wanting to use a particular TLS 45 `~prosody/.ldaprc` if they exist. Users wanting to use a particular TLS