OpenLDAP

Connection settings

  • Connection DN: cn=admin,dc=example,dc=com (example DN for a service user account)
  • Connection password: password123
  • LDAP server address: ldap.example.ru (example LDAP server FQDN)

Group search

  • Group search base DN: ou=Groups,dc=example,dc=com (example group search base DN)
  • Group name attribute: cn (example attribute for the short group name in the directory)

User search

  • User search base DN: ou=Users,dc=example,dc=com (example user organizational unit base DN)
  • Email attribute: mail (example user-level LDAP field containing the employee email)
  • Email suffix: @example.com (example suffix appended to the user userName)

Specify an email suffix when the LDAP directory does not store an explicit email attribute

When using TLS

  • Connect with startTLS: yes/no (option to connect to the LDAP server with startTLS)
  • Enable CA verification: yes/no (option to verify the certificate authority certificate; disabled by default)
  • Client certificate: file.pem (client certificate file)
  • Trusted root certificate: ca.pem (trusted root certificate file)
  • Client private key: key.pem (client private key file)

In the User mapping block, you can define the mapping between user and group attributes. For example, map the user uid attribute to the group memberOf attribute to determine group membership.

Example
dn: uid=user1,ou=users,dc=example,dc=com
uid: user1
cn: User One
memberOf: cn=group1,ou=groups,dc=example,dc=com
memberOf: cn=group2,ou=groups,dc=example,dc=com
← Active Directory
Samba DC →