comparison mod_lib_ldap/README.md @ 1643:71538875be48

mod_lib_ldap: Update README to clarify discussion of auth / TLS... and discourage disabling TLS.
author Paul Aurich <paul@darkrain42.org>
date Thu, 02 Apr 2015 18:49:52 -0700
parents 9da03e45c6be
children
comparison
equal deleted inserted replaced
1642:a4a6b4be973a 1643:71538875be48
4 (mod\_storage\_ldap) to query against an LDAP server. It also provides a plugin library (mod\_lib\_ldap) 4 (mod\_storage\_ldap) to query against an LDAP server. It also provides a plugin library (mod\_lib\_ldap)
5 for accessing an LDAP server to make writing other LDAP-based plugins easier in the future. 5 for accessing an LDAP server to make writing other LDAP-based plugins easier in the future.
6 6
7 # LDAP Authentication 7 # LDAP Authentication
8 8
9 **NOTE**: LDAP authentication currently only works with plaintext auth! If this isn't ok 9 **NOTE**: LDAP authentication currently only works with plaintext auth (as opposed to DIGEST-MD5 or SCRAM)
10 with you, don't use it! (Or better yet, fix it =) ) 10 If this isn't ok with you, don't use it! (Or better yet, fix it =) )
11 11
12 With that note in mind, you need to set 'allow\_unencrypted\_plain\_auth' to true in your configuration if 12 With that note in mind, if you need to allow (XMPP) clients to connect to your server without TLS and
13 you want to use LDAP authentication. 13 want to use this module, you need to set 'allow\_unencrypted\_plain\_auth' to true in your
14 configuration. You probably don't actually want to do this, though.
14 15
15 To enable LDAP authentication, set 'authentication' to 'ldap2' in your configuration file. 16 To enable LDAP authentication, set 'authentication' to 'ldap2' in your configuration file.
16 See also http://prosody.im/doc/authentication. 17 See also http://prosody.im/doc/authentication.
17 18
18 # LDAP Storage 19 # LDAP Storage