Skip to Content.
Sympa Menu

en - RE: [sympa-users] sympa with ldaps authentication

Subject: The mailing list for listmasters using Sympa

List archive

Chronological Thread  
  • From: Steve Shipway <address@concealed>
  • To: Andreas Hubert <address@concealed>, "address@concealed" <address@concealed>
  • Subject: RE: [sympa-users] sympa with ldaps authentication
  • Date: Mon, 13 Apr 2015 09:37:58 +0000

This is the configuration we use for our LDAP setup.  I suspect the part you missed out was specifying the port number in the host definition, since you'll need to use the LDAPS port (636)?

Also, your alternative_email_attribute seems to be split onto two lines, but that may just be your display.

Obviously, you can omit the regexp definition if you want to.  This is set up so that our users can login via either their userID or as their email address (both students and staff).  Since we use Novell LDAP and you use Microsoft, you'll have different suffix, attributes and filters, but it should give you the right idea.

ldap
    regexp                (@.*auckland(uni)?\.ac\.nz|^[a-z]{3,4}\d\d\d\d?)$
    host                    ldap-vip.auckland.ac.nz:636
    timeout               20
    bind_dn              cn=sympa,ou=webapps,ou=ec,o=uoa
    bind_password    xxxxxxxxxxx
    suffix                  ou=ec_users,dc=ec,dc=auckland,dc=ac,dc=nz
    get_dn_by_email_filter  (mail=[sender])
    get_dn_by_uid_filter    (uid=[sender])
    email_attribute    mail
    alternative_email_attribute mailalternateaddress
    scope                 one
    use_ssl               1
    ssl_version          tlsv1

Steve

Steve Shipway
University of Auckland ITS
UNIX Systems Design Lead
Ph: +64 9 373 7599 ext 86487
 





Archive powered by MHonArc 2.6.19+.

Top of Page