LDAP Auth Backend: Univention Corporate Server Examples

Below are example configurations for use with the LDAP backend and the Univention Corporate Server.

$conf['useacl']      = 1;
$conf['openregister']= 0;
$conf['superuser']   = '@Domain Admins';
$conf['authtype']    = 'ldap';
 
$conf['auth']['ldap']['server']      = 'ldap://1.2.3.4:389';
$conf['auth']['ldap']['starttls']    = 1;
$conf['auth']['ldap']['usertree']    = 'cn=users, dc=basedn';
$conf['auth']['ldap']['grouptree']   = 'cn=groups, dc=basedn';
$conf['auth']['ldap']['userfilter']  = '(&(uid=%{user})(objectClass=posixAccount))';
$conf['auth']['ldap']['groupfilter'] = '(&(objectClass=posixGroup)(|(gidNumber=%{gid})(uniqueMember=%{dn})))';
 
$conf['auth']['ldap']['mapping']['mail'] = 'mailprimaryaddress';