LDAP Authentication Module
##########################

The LDAP authentication module allows to authenticate users via a LDAP server.

The configuration of the LDAP connection is set in the ``ldap_authentication``
section.

To be activated, the ``ldap`` method must be added to the ``authentications``
methods list of the ``session`` section of the configuration.

Configuration
*************

uri
---

The LDAP URL to use to connect to the server following the :rfc:`2255`.
It is extended to support `SSL
<https://en.wikipedia.org/wiki/Secure_Sockets_Layer>`_ and `STARTTLS
<https://en.wikipedia.org/wiki/STARTTLS>`_.
The available protocols are:

   - ``ldap``: simple LDAP
   - ``ldap+tls``: LDAP with STARTTLS
   - ``ldaps``: LDAP with SSL


bind_pass
---------

The LDAP password used to bind if needed.

uid
---

The UID Attribute for authentication (default is ``uid``).

create_user
-----------

A boolean to create user if not in the database.