Home
Main website
Display Sidebar
Hide Ads
Recent Changes
View Source:
ldap.conf(5)
Edit
PageHistory
Diff
Info
LikePages
LDAP.CONF !!!LDAP.CONF NAME SYNOPSIS DESCRIPTION OPTIONS FILES SEE ALSO AUTHOR ACKNOWLEDGEMENTS ---- !!NAME ldap.conf, .ldaprc - ldap configuration file !!SYNOPSIS /etc/ldap/ldap.conf !!DESCRIPTION The ''ldap.conf'' configuration file is used to set system-wide defaults to be applied when running ''ldap'' clients. If the environment variable __LDAPNOINIT__ is defined, all defaulting is disabled. Each user may specify an optional configuration file, ''.ldaprc'', in his/her home directory which will be used to override the system-wide defaults file. Additional configuration files can be specified using the __LDAPCONF__ and __LDAPRC__ environment variables. __LDAPCONF__ may be set the path of a configuration file. This path can be absolute or relative to current working directory. The __LDAPRC__, if defined, should be a basename of a file in the current working directory or in the user's home directory. Environmental variables may also be used to augment the file based defaults. The name of the option is the as listed but with a prefix of __LDAP__. For example, to define __BASE__ via the environment, define the variable __LDAPBASE__ to desired value. Some options are user-only. Such options are ignored if present in the ''ldap.conf'' (or file specified by __LDAPCONF__). !!OPTIONS The different configuration options are: __BASE __ Used to specify the default base DN to use when performing ldap operations. The base must be specified as a Distinguished Name in LDAP format. __BINDDN __ Used to specify the default bind DN to use when performing ldap operations. The bind DN must be specified as a Distinguished Name in LDAP format. This is a user-only option. __HOST __ Used to specify the name(s) of an LDAP server(s) to which ''ldap'' library should connect to. Each server's name can be specified as a domain-style name or an IP address and optionally followed a ':' and the port number the ldap server is listening on. A space separated listed of host may be provided. __PORT __ Used to specify the port used with connecting to LDAP servers(s). The port may be specified as a number. __SASL_SECPROPS __ Used to specify Cyrus SASL security properties. The __none__ flag (without any other properities) causes the flag properites defaults ( __noplain__ flag disables mechanisms susceptible to simple passive attacks. The __noactive__ flag disables mechanisms susceptible to active attacks. The __nodict__ flag disables mechanisms susceptible to passive dictionary attacks. The __noanonyous__ flag disables mechanisms which support anonymous login. The __forwardsec__ flag require forward secrecy between sessions. The __passcred__ require mechanisms which pass client credentials (and allow mechanisms which can pass credentials to do so). The __minssf=__ property specifies the minimum acceptable ''security strength factor'' as an integer approximate to effective key length used for encryption. 0 (zero) implies no protection, 1 implies integrity protection only, 56 allows DES or other weak ciphers, 112 allows triple DES and other strong ciphers, 128 allows RC4, Blowfish and other modern strong ciphers. The default is 0. The __maxssf=__ property specifies the maximum acceptable ''security strength factor'' as an integer (see minssf description). The default is INT_MAX. The __maxbufsize=__ property specifies the maximum security layer receive buffer size allowed. 0 disables security layers. The default is 65536. __SIZELIMIT __ Used to specify a size limit to use when performing searches. The number should be an non-negative integer. ''SIZELIMIT'' of zero (0) specifies unlimited search size. __TIMELIMIT __ Used to specify a time limit to use when performing searches. The number should be an non-negative integer. ''TIMELIMIT'' of zero (0) specifies unlimited search time to be used. __DEREF __ Specify how aliases dereferencing is done. ''DEREF'' should be set to one of __never, always, search,__ or __find__ to specify that aliases are never dereferenced, always dereferenced, dereferenced when searching, or dereferenced only when locating the base object for the search. The default is to never dereference aliases. !!FILES ''/etc/ldap/ldap.conf'' ''$HOME/.ldaprc'' ''$CWD/.ldaprc'' !!SEE ALSO ldap(3) !!AUTHOR Kurt Zeilenga, The OpenLDAP Project !!ACKNOWLEDGEMENTS __OpenLDAP__ is developed and maintained by The OpenLDAP Project (http://www.openldap.org/). __OpenLDAP__ is derived from University of Michigan LDAP 3.3 Release. ----
8 pages link to
ldap.conf(5)
:
ldapadd(1)
ldapdelete(1)
ldapmodify(1)
ldapmodrdn(1)
ldapsearch(1)
Man5l
ldap2dns(1)
ldap2dnsd(1)
This page is a man page (or other imported legacy content). We are unable to automatically determine the license status of this page.
