1AFP_LDAP.CONF(5) Netatalk 2.1 AFP_LDAP.CONF(5)
2
3
4
6 afp_ldap.conf - Configuration file used by afpd(8) to configure a LDAP
7 connection to an LDAP server. That is needed for ACL support in order
8 to be able to query LDAP for UUIDs.
9
11 /etc/netatalk//afp_ldap.conf is the configuration file used by afpd to
12 set up an LDAP connection to an LDAP server.
13
14 Any line not prefixed with # is interpreted.
15
16 Note
17 You can use afpldaptest(1) to syntactically check your config
18 The required parameters and their meanings are:
19
21 ldap_server
22 Name or IP address of your LDAP Server
23
24
25 ldap_auth_method
26 Authentication method: none | simple | sasl
27
28 none
29 anonymous LDAP bind
30
31 simple
32 simple LDAP bind
33
34 sasl
35 SASL. Not yet supported !
36
37 ldap_auth_dn
38 Distinguished Name of the user for simple bind.
39
40
41 ldap_auth_pw
42 Distinguished Name of the user for simple bind.
43
44
45 ldap_userbase
46 DN of the user container in LDAP.
47
48
49 ldap_userscope
50 Search scope for user search: base | one | sub
51
52
53 ldap_groupbase
54 DN of the group container in LDAP.
55
56
57 ldap_groupscope
58 Search scope for user search: base | one | sub
59
60
61 ldap_uuuid_attr
62 Name of the LDAP attribute with the UUIDs.
63
64 Note: this is used both for users and groups.
65
66
67 ldap_name_attr
68 Name of the LDAP attribute with the users short name.
69
70
71 ldap_group_attr
72 Name of the LDAP attribute with the groups short name.
73
74
76 Example. afp_ldap.conf setup with simple bind
77
78 ldap_server = localhost
79 ldap_auth_method = simple
80 ldap_auth_dn = cn=admin,dc=domain,dc=org
81 ldap_auth_pw = notthisone
82 ldap_userbase = ou=users,dc=domain,dc=org
83 ldap_userscope = one
84 ldap_groupbase = ou=groups,dc=domain,dc=org
85 ldap_groupscope = one
86 ldap_uuid_attr = some_attribute
87 ldap_name_attr = cn
88 ldap_group_attr = cn
89
91 afpd(8), AppleVolumes.default(5),afpldaptest(1)
92
93
94
95Netatalk 2.1 28 November 2009 AFP_LDAP.CONF(5)