From ef88385d850822d5b237b03abdce3f6c659756f4 Mon Sep 17 00:00:00 2001 From: Jeremy Date: Tue, 15 May 2012 17:19:50 -0400 Subject: m_ldap_authentication: Removed the dependency on a specific binddn in favour of searching the tree for matching criteria and using the returned DN --- data/modules.example.conf | 15 +++++++++++++-- 1 file changed, 13 insertions(+), 2 deletions(-) (limited to 'data') diff --git a/data/modules.example.conf b/data/modules.example.conf index 3a3931e1b..bbb7f9651 100644 --- a/data/modules.example.conf +++ b/data/modules.example.conf @@ -101,6 +101,10 @@ ldap { server = "ldap://127.0.0.1" port = 389 + + /* + * Admin credentials used for performing searches and adding users. + */ admin_binddn = "cn=Manager,dc=anope,dc=org" admin_password = "secret" } @@ -115,9 +119,16 @@ ldap m_ldap_authentication { /* - * The distinguished name we should bind to when a user tries to identify. + * The distinguished name used for searching for users's accounts. + */ + basedn = "ou=users,dc=anope,dc=org" + + /* + * The search filter used to look up users's accounts. + * %account is replaced with the user's account + * %object_class is replaced with the object_class configured below. */ - binddn = "ou=users,dc=anope,dc=org" + search_filter = "(&(uid=%account)(objectClass=%object_class))" /* * The object class used by LDAP to store user account information. -- cgit