Re: NetReg: Netscape LDAP

New Message Reply Date view Thread view Subject view Author view Attachment view

From: Ricardo Stella (stella@rider.edu)
Date: Thu Jun 24 2004 - 08:26:27 CDT

I'm just starting out with Netreg, but the first thing we did get
working was LDAP auth...

Here's our settings...

  $AUTH_METHOD = "LDAP"; # possible values: (FTP|POP|IMAP|LDAP)

  $POPSERVER = "0.0.0.0";
  $FTPSERVER = "0.0.0.0";
  $IMAPSERVER = "0.0.0.0";

  # Note that I'm using one server, and it's on a different port
  @LDAP_SERVERS = ("nn.nn.nn.nn:12345");
  $LDAP_TIMEOUT = 5;
  # Note that some places uses OLD style BASE. Make sure you have
  # the right one, or else, sure enough, connections will fail
  # Old style used to be "o=Full Organization Name, c=XX"
  # Where XX is the two character country code
  $LDAP_BASE = "ou=campus,dc=lawrence,dc=edu";

  # Which attribute must match username, typically cn or uid
  # NOTE that if the uid is not part of the DN, then UID must be
  # indexed so it can be searchable. I believe Netscape
  # does not make this field indexable by default
  $LDAP_AUTH_ATTR = "uid";

  # You mentioned you want to do anonymous bind ?
  # Make sure it really allows anonymous searches
  # Sometimes you have to add the IP ranges that are allowed
  $LDAP_BIND_ANON = 1;

  # Credentials for non-anonymous binding, if needed
  $LDAP_BIND_CREDENTIALS = "cn=Directory Manager:secretpwd";

  # Not sure about this, but I'm not using it...
  $LDAP_USES_PASSTHRU_AUTH = 0;

  # Set if you wish to use Microsoft's Active Directory Server as your
  # authentication source
  $LDAP_USE_ADS = 0;

  # ADS can authenticate using user@domain form: specify the domain that
  # should be appended to the username entered in the web form.
  $LDAP_ADS_DOMAIN = "lawrence.edu";

  # Turn on if you want all usernames to be sent as lowercase
  $AUTH_LC_USERNAME = 1;

  # I'm not sure what this is really for, but setting it to null worked
  # fine for us...
  $LDAP_URL = "";
**********************************************************************
To unsubscribe from this list, send an e-mail message to
majordomo@southwestern.edu containing a single line with the words:
unsubscribe netreg
Send requests for assistance to: owner-netreg@southwestern.edu
**********************************************************************

New Message Reply Date view Thread view Subject view Author view Attachment view

This archive was generated by hypermail 2.1.4 : Thu Aug 12 2004 - 12:01:46 CDT