diff options
| author | Jeremy <jeremy@ssnet.ca> | 2012-05-15 17:19:50 -0400 |
|---|---|---|
| committer | Adam <Adam@anope.org> | 2012-05-15 17:19:50 -0400 |
| commit | ef88385d850822d5b237b03abdce3f6c659756f4 (patch) | |
| tree | 337aa4e761377c9c94e2aa87f312092089b589ed /data | |
| parent | 90b028316047d76ae5ee4b2293b4947ac90f7750 (diff) | |
m_ldap_authentication: Removed the dependency on a specific binddn in favour of searching the tree for matching criteria and using the returned DN
Diffstat (limited to 'data')
| -rw-r--r-- | data/modules.example.conf | 15 |
1 files changed, 13 insertions, 2 deletions
diff --git a/data/modules.example.conf b/data/modules.example.conf index 3a3931e1b..bbb7f9651 100644 --- a/data/modules.example.conf +++ b/data/modules.example.conf @@ -101,6 +101,10 @@ ldap { server = "ldap://127.0.0.1" port = 389 + + /* + * Admin credentials used for performing searches and adding users. + */ admin_binddn = "cn=Manager,dc=anope,dc=org" admin_password = "secret" } @@ -115,9 +119,16 @@ ldap m_ldap_authentication { /* - * The distinguished name we should bind to when a user tries to identify. + * The distinguished name used for searching for users's accounts. + */ + basedn = "ou=users,dc=anope,dc=org" + + /* + * The search filter used to look up users's accounts. + * %account is replaced with the user's account + * %object_class is replaced with the object_class configured below. */ - binddn = "ou=users,dc=anope,dc=org" + search_filter = "(&(uid=%account)(objectClass=%object_class))" /* * The object class used by LDAP to store user account information. |