2022-03-08 19:42:28 +01:00
|
|
|
#
|
|
|
|
|
# LDAP Defaults
|
|
|
|
|
#
|
|
|
|
|
|
|
|
|
|
# See ldap.conf(5) for details
|
|
|
|
|
# This file should be world readable but not world writable.
|
|
|
|
|
|
|
|
|
|
#BASE dc=example,dc=com
|
2022-05-04 10:29:03 +02:00
|
|
|
BASE %%ldapclient_base_dn
|
2022-03-08 19:42:28 +01:00
|
|
|
#URI ldap://ldap.example.com ldap://ldap-master.example.com:666
|
|
|
|
|
URI ldaps://%%ldap_server_address:%%ldap_port
|
|
|
|
|
|
|
|
|
|
#SIZELIMIT 12
|
|
|
|
|
#TIMELIMIT 15
|
|
|
|
|
#DEREF never
|
|
|
|
|
|
|
|
|
|
# When no CA certificates are specified the Shared System Certificates
|
|
|
|
|
# are in use. In order to have these available along with the ones specified
|
|
|
|
|
# by TLS_CACERTDIR one has to include them explicitly:
|
|
|
|
|
#TLS_CACERT /etc/pki/tls/cert.pem
|
|
|
|
|
TLS_KEY %%ldap_key_file
|
|
|
|
|
TLS_CERT %%ldap_cert_file
|
|
|
|
|
TLS_CACERT %%ldap_ca_file
|
|
|
|
|
|
|
|
|
|
# System-wide Crypto Policies provide up to date cipher suite which should
|
|
|
|
|
# be used unless one needs a finer grinded selection of ciphers. Hence, the
|
|
|
|
|
# PROFILE=SYSTEM value represents the default behavior which is in place
|
|
|
|
|
# when no explicit setting is used. (see openssl-ciphers(1) for more info)
|
|
|
|
|
#TLS_CIPHER_SUITE PROFILE=SYSTEM
|
|
|
|
|
|
|
|
|
|
# Turning this off breaks GSSAPI used with krb5 when rdns = false
|
|
|
|
|
SASL_NOCANON on
|
|
|
|
|
|
|
|
|
|
BINDDN %%ldapclient_remote_user
|
|
|
|
|
TIMELIMIT 10
|
|
|
|
|
NETWORK_TIMEOUT 10
|
|
|
|
|
TIMEOUT 10
|
|
|
|
|
BINDPW %%ldapclient_remote_user_password
|
