<?php
/**
 * AD configuration for LDAP Auth Plugin
 * See https://www.dokuwiki.org/plugin:authldap:ad for details and explanation
 */

$conf['authtype']                               = 'authldap';
$conf['plugin']['authldap']['server']           = 'mydomain.dom';
$conf['plugin']['authldap']['binddn']           = '%{user}@%{server}';
$conf['plugin']['authldap']['usertree']         = 'dc=mydomain,dc=dom';
$conf['plugin']['authldap']['userfilter']       = '(userPrincipalName=%{user}@%{server})';
$conf['plugin']['authldap']['mapping']['name']  = 'displayname';
$conf['plugin']['authldap']['mapping']['grps']  = array('memberof' => '/CN=(.+?),/i');
$conf['plugin']['authldap']['grouptree']        = 'dc=mydomain,dc=dom'; # position for find groups, at root here
$conf['plugin']['authldap']['groupfilter']      = '(&(cn=*)(Member=%{dn})(objectClass=group))'; # find groups for current user(dn)
$conf['plugin']['authldap']['referrals']        = 0; # Switch referrals off for use with Active Directory
$conf['plugin']['authldap']['version']          = 3;
$conf['plugin']['authldap']['debug']            = 0; #set 1 for watch authenticate activity (eg. list of user groups) on html page