Skip to content

Commit 42f717c

Browse files
sirainencmouse
authored andcommitted
auth/ldap: Add commonly used ldap_* settings to most examples
1 parent e17d1e1 commit 42f717c

File tree

1 file changed

+49
-18
lines changed
  • docs/core/config/auth/databases

1 file changed

+49
-18
lines changed

docs/core/config/auth/databases/ldap.md

Lines changed: 49 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -211,7 +211,13 @@ expression can include ldap specific variables and other variables too.
211211
For example:
212212
::: code-group
213213
```[dovecot.conf]
214+
ldap_uris = ldap://ldap.example.org
215+
ldap_auth_dn = cn=admin,dc=example,dc=org
216+
ldap_auth_dn_password = secret
217+
ldap_base = dc=example,dc=org
218+
214219
passdb ldap {
220+
filter = (&(objectClass=posixAccount)(uid=%{user}))
215221
fields {
216222
user = %{ldap:uid}
217223
password = %{ldap:userPassword}
@@ -255,15 +261,20 @@ A typical configuration would look like:
255261

256262
::: code-group
257263
```[dovecot.conf]
258-
passdb ldap {
259-
bind = no
260-
default_password_scheme = MD5
261-
ldap_filter = (&(objectClass=posixAccount)(uid=%{user}))
262-
fields {
263-
user = %{ldap:uid}
264-
password = %{ldap:userPassword}
265-
}
264+
ldap_uris = ldap://ldap.example.org
265+
ldap_auth_dn = cn=admin,dc=example,dc=org
266+
ldap_auth_dn_password = secret
267+
ldap_base = dc=example,dc=org
268+
269+
passdb ldap {
270+
bind = no
271+
default_password_scheme = MD5
272+
filter = (&(objectClass=posixAccount)(uid=%{user}))
273+
fields {
274+
user = %{ldap:uid}
275+
password = %{ldap:userPassword}
266276
}
277+
}
267278
```
268279
:::
269280

@@ -297,13 +308,18 @@ Example:
297308

298309
::: code-group
299310
```[dovecot.conf]
300-
passdb ldap {
301-
bind = yes
302-
ldap_filter = (&(objectClass=posixAccount)(uid=%{user}))
303-
fields {
304-
user = %{ldap:uid}
305-
}
311+
ldap_uris = ldap://ldap.example.org
312+
ldap_auth_dn = cn=admin,dc=example,dc=org
313+
ldap_auth_dn_password = secret
314+
ldap_base = dc=example,dc=org
315+
316+
passdb ldap {
317+
bind = yes
318+
filter = (&(objectClass=posixAccount)(uid=%{user}))
319+
fields {
320+
user = %{ldap:uid}
306321
}
322+
}
307323
```
308324
:::
309325

@@ -327,10 +343,15 @@ If you're using DN template, there is no LDAP lookup that returns fields, so
327343

328344
::: code-group
329345
```[dovecot.conf]
330-
passdb ldap {
331-
bind = yes
332-
bind_userdn = cn=%{user},ou=people,o=org
333-
}
346+
ldap_uris = ldap://ldap.example.org
347+
ldap_auth_dn = cn=admin,dc=example,dc=org
348+
ldap_auth_dn_password = secret
349+
ldap_base = dc=example,dc=org
350+
351+
passdb ldap {
352+
bind = yes
353+
bind_userdn = cn=%{user},ou=people,o=org
354+
}
334355
```
335356
:::
336357

@@ -357,6 +378,11 @@ them globally with [[setting,mail_uid]] and [[setting,mail_gid]] settings instea
357378
returning them from LDAP.
358379

359380
```
381+
ldap_uris = ldap://ldap.example.org
382+
ldap_auth_dn = cn=admin,dc=example,dc=org
383+
ldap_auth_dn_password = secret
384+
ldap_base = dc=example,dc=org
385+
360386
userdb ldap {
361387
filter = (&(objectClass=posixAccount)(uid=%{user}))
362388
fields {
@@ -371,6 +397,11 @@ userdb ldap {
371397

372398
For using `doveadm -A` or `-u` with wildcards:
373399
```
400+
ldap_uris = ldap://ldap.example.org
401+
ldap_auth_dn = cn=admin,dc=example,dc=org
402+
ldap_auth_dn_password = secret
403+
ldap_base = dc=example,dc=org
404+
374405
userdb ldap {
375406
iterate_filter = (objectClass=posixAccount)
376407
iterate_fields {

0 commit comments

Comments
 (0)