-
Notifications
You must be signed in to change notification settings - Fork 1
/
ldapauth.ini
76 lines (76 loc) · 2.8 KB
/
ldapauth.ini
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
! IIS LDAP Authentication Filter Configuration File
! Version 2.0
!
! INSTRUCTIONS:
! Each parameter starts on a new line, first with the directive
! name, then white space, then the desired value.
!
! All comment lines must begin with a ! character. Comments
! should not be placed on the same line as a directive.
!
! Use %20 as a substitute for a space. Example:
! Space%20In%20Parameter --> Space In Parameter.
!
! Directive Description
! -------------------------------------------------------------
! LDAPHOST [REQUIRED] The IP address of the LDAP server.
! DNS names are not allowed at this time.
!
! LDAPPORT [OPTIONAL] The port number for the LDAP
! connection. The default port is tcp/389. If a
! CERTSFILE is specified, the default port will
! be tcp/636.
!
! BINDUSER [OPTIONAL] The username of the account used
! to connect to the LDAP server. It should be
! a valid DN.
!
! BINDPASSWORD [OPTIONAL] The password for the BINDUSER. If
! this is not specified, a blank password will
! be used.
!
! LDAPFILTER [REQUIRED] The filter string used to search
! for users. The authenticating username is
! inserted into the filter by the key %user%.
!
! Example: If my filter is (cn=%user%) and
! the user "bob" tries to authenticate, the
! LDAP filter query would be (cn=bob).
!
! SEARCHBASE [REQUIRED] The LDAP search base.
!
! CERTSFILE [OPTIONAL] The SSL certificate file to use
! a secure connection. This file should be a
! BASE-64 or DER format certificate. If this
! is specified, LDAPPORT will default to 636
! unless specified explicitly in the
! configuration file.
!
! NTUSER [OPTIONAL] The NT user mapped to LDAP users.
! If this is specified, all LDAP users will be
! authenticated to the IIS security as that
! particular NT user.
!
! NTPASSWORD [REQUIRED] The password for the mapped NT
! user. If NTUSER is specified, the NTUSER
! value will be used as the username. If
! NTUSER is not specified, the LDAP username
! will be used.
!
! CACHESIZE [OPTIONAL] The number of user records that
! can be stored in a memory cache.
!
! CACHETIME [OPTIONAL] The lifetime of a cache record
! in seconds. Example: 1800 for 30 minutes.
!
LDAPHOST www.xxx.yyy.zzz
!LDAPPORT 389
BINDUSER uid=mybinduser,ou=xxxxx,dc=yyyy,dc=zzz
BINDPASSWORD mybindpasswd
LDAPFILTER (&(cn=%username%)(objectclass=posixaccount))
SEARCHBASE ou=mybase,ou=xxxxxx,dc=yyyyy,dc=zzz
!CERTSFILE c:\mycertificate.der
NTUSER ntuser
NTUSERPASSWORD ntuserpassword
CACHESIZE 1000
CACHETIME 1800