...
Finally, you need to provide the base search DN and the User identifier attributes. Both of these will be used when looking up the full DN of the user attempting to log in to Unimus.
An optional LDAP Filter can be configured to further restrict which LDAP users are allowed to authenticate. LDAP filters use the standard LDAP filter syntax supported by your LDAP server. A common use case is limiting authentication to members of a specific group.
OpenLDAP configuration example
...
| Code Block | ||
|---|---|---|
| ||
LDAP server address: ldap.net.local
LDAP port: 389
LDAP access user DN: uid=unimus,ou=Service_accounts,ou=People,dc=net,dc=local
LDAP access password: superSecretPasswordHere
LDAP base DN: ou=Users,ou=People,dc=net,dc=local
User identifier: uid
LDAP filter: (memberOf=cn=unimus_users,ou=unimus,ou=Applications,ou=Group,dc=net,dc=local) |
Microsoft Active Directory configuration example
...
| Code Block | ||
|---|---|---|
| ||
LDAP server address: dc.net.local
LDAP port: 389
LDAP access user DN: CN=Unimus Service,OU=Service Users,DC=net,DC=local
LDAP access password: superSecretPasswordHere
LDAP base DN: OU=Network Admins,DC=net,DC=local
User identifier: sAMAccountName
LDAP filter: (memberOf=CN=AAA_Access,OU=Groups,DC=net,DC=local) |
A how-to guide for Active Directory
...