1,574
edits
Changes
Jump to navigation
Jump to search
Line 38:
Line 38: − − Optional - Full LDAP authentication can be enabled. Once enabled it cannot be disabled, so experiment with care. − To enable: − db configuration setprop ldap Authentication enabled −
→Authentication
(&(objectClass=mailboxRelatedObject)(objectClass=posixGroup))
(&(objectClass=mailboxRelatedObject)(objectClass=posixGroup))
{{Note box|Most of the time, anonymous binds are sufficient, no need to configure the Admin DN and password. A few applications do require to bind as a valid user. This is needed when your application needs access attributes like uidNumber, gidNumber, homeDIrectory, loginShell etc... (for example, if you need to authenticate another Linux box using nss_ldap or sssd, you'll need to bind as a valid user). In this case, you can create a regular user (you may name it auth for example), set it a password, and use it's dn and credential to bind to your LDAP server}}
{{Note box|Most of the time, anonymous binds are sufficient, no need to configure the Admin DN and password. A few applications do require to bind as a valid user. This is needed when your application needs access attributes like uidNumber, gidNumber, homeDIrectory, loginShell etc... (for example, if you need to authenticate another Linux box using nss_ldap or sssd, you'll need to bind as a valid user). In this case, you can create a regular user (you may name it auth for example), set it a password, and use it's dn and credential to bind to your LDAP server}}