| Line | Revision | Contents |
| 1 | 1 | * LDAPUserDir |
| 2 | The public subdirectory in users' home directories. |
|
| 3 | ||
| 4 | Example: LDAPUserDir public_html |
|
| 5 | ||
| 6 | * LDAPUserDirServer |
|
| 7 | 12 | The LDAP directory server to connect to. |
| 8 | 1 | |
| 9 | Example: LDAPUserDirServer server.example.com |
|
| 10 | ||
| 11 | 14 | For failover, multiple servers can be specified, separated by spaces. |
| 12 | All server names must be enclosed in the same set of quotes. |
|
| 13 | ||
| 14 | Example: LDAPUserDirServer "server1.example.com server2.example.com" |
|
| 15 | ||
| 16 | 12 | * LDAPUserDirServerURL |
| 17 | The LDAP URL to use. The attributes and extensions fields of the URL are |
|
| 18 | 19 | ignored. The attributes portion of the URL is ignored; use |
| 19 | 27 | LDAPAttributeName to change the expected attribute names. Base DNs and |
| 20 | escapes (%u/%v) used in the URL must be URL encoded (e.g., replace '=' |
|
| 21 | with '%3D', ',' with '%2C', '%' with '%25', etc). |
|
| 22 | 12 | |
| 23 | 27 | Example: LDAPUserDirServerURL ldap://server.example.com/dc%3Dexample%2Cdc%3Dcom??sub?(uid=%25v) |
| 24 | 12 | |
| 25 | 1 | * LDAPUserDirDNInfo |
| 26 | 12 | The DN and password to use when binding to the LDAP server. If this |
| 27 | directive is omitted, anonymous binds are used. |
|
| 28 | 1 | |
| 29 | Example: LDAPUserDirDNInfo cn=root,dc=example,dc=com dnpass |
|
| 30 | ||
| 31 | * LDAPUserDirBaseDN |
|
| 32 | 12 | The base DN to search on. |
| 33 | 1 | |
| 34 | Example: LDAPUserDirBaseDN dc=example,dc=com |
|
| 35 | ||
| 36 | * LDAPUserDirFilter |
|
| 37 | 12 | The LDAP filter template to use for searches. Both %u and %v are replaced |
| 38 | with the username being resolved, but %v is deprecated and may be removed |
|
| 39 | in a future release. |
|
| 40 | 1 | |
| 41 | 12 | Example: LDAPUserDirFilter "(&(uid=%u)(objectClass=posixAccount))" |
| 42 | 1 | |
| 43 | 14 | * LDAPAttributeName |
| 44 | Change the LDAP attribute names used in order to reflect your local schema. |
|
| 45 | 15 | Currently, the "uid", "homeDirectory", "uidNumber", and "gidNumber" |
| 46 | attributes are used. |
|
| 47 | 14 | |
| 48 | For example, if your LDAP schema uses the "homeLocation" attribute instead |
|
| 49 | of "homeDirectory": |
|
| 50 | ||
| 51 | Example: LDAPAttributeName homeDirectory homeLocation |
|
| 52 | ||
| 53 | Or if it uses "ispUsername" to store the account's username instead of |
|
| 54 | "uid": |
|
| 55 | ||
| 56 | Example: LDAPAttributeName uid ispUsername |
|
| 57 | 10 | |
| 58 | 1 | * LDAPUserDirSearchScope |
| 59 | 12 | The LDAP search scope ("onelevel" or "subtree").
|
| 60 | 1 | |
| 61 | 11 | Example: LDAPUserDirSearchScope subtree |
| 62 | 1 | |
| 63 | 14 | * LDAPProtocolVersion |
| 64 | The LDAP protocol version to use (2 or 3). |
|
| 65 | ||
| 66 | Example: LDAPProtocolVersion 3 |
|
| 67 | ||
| 68 | 1 | * LDAPUserDirUseTLS |
| 69 | Whether to use an encrypted (TLS/SSL) connection to the LDAP server. |
|
| 70 | ||
| 71 | 11 | Example: LDAPUserDirUseTLS off |
| 72 | ||
| 73 | * LDAPUserDirCacheTimeout |
|
| 74 | 15 | How long, in seconds, to store cached LDAP entries. Caching is only |
| 75 | supported with Apache 2.0 and later. |
|
| 76 | 11 | |
| 77 | Example: LDAPUserDirCacheTimeout 300 |
Loggerhead 1.17 is a web-based interface for Bazaar branches