Configuration

Configuration#

The LDAP Authentication Module uses values from settings in the [ldap_authentication] section of the configuration file.

To be activated, the ldap method must be added to the authentications methods list in the session section of the configuration file.

uri#

The LDAP URL to use to connect to the server following RFC 2255. It is extended to support SSL and STARTTLS. The available protocols are:

  • ldap: simple LDAP

  • ldap+tls: LDAP with STARTTLS

  • ldaps: LDAP with SSL

uid#

The LDAP attribute holding the login name of the corresponding user in Tryton.

The default value is: uid

bind_pass#

The LDAP password used to bind to the server if needed.

create_user#

Determines whether a new user is automatically created in Tryton when LDAP authentication succeeds and the user doesn’t already exist. When False only users that already exist in Tryton are able to login, but when set to True any LDAP user can login.

The default value is: False