OpenLDAP

Authenticate using OpenLDAP or Active Directory.

Authentication & Identity Management · LDAP Authentication

Configuration parameters

  • ldap_server_vendor — LDAP Server Vendor (required)
  • host — Server IP or Host Name (e.g., 192.168.0.1) (required)
  • port — Port. If not specified, default port is 389, or 636 for LDAPS.
  • credentials — User DN (e.g., cn=admin,ou=users,dc=domain,dc=com) (required)
  • base_dn — Base DN (e.g., DC=domain,DC=com) (required)
  • fetch_groups — Auto populate groups
  • group_filter_class — Groups Object Class
  • group_identifier_attribute — Groups Unique Identifier Attribute
  • member_identifier_attribute — Group Membership Identifier Attribute
  • user_filter_class — User Object Class
  • custom_attributes — User Defined Attributes
  • user_identifier_attribute — User Unique Identifier Attribute
  • page_size — Page size
  • connection_type — Connection Type (required)
  • ssl_version — SSL Version
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings

Commands (4)

  • ad-authenticate

    Performs a simple bind operation on the LDAP server.

  • ad-authenticate-and-roles

    Performs a simple bind operation on the LDAP server and returns the authenticated user's groups.

  • ad-entries-search

    A generic LDAP search command.

  • ad-groups

    Fetches LDAP groups under a given base DN.