|
Protocol Version that the server supports.
|
|
Encryption
|
|
Encryption that the server supports. TLS is only supported by Protocol Version 3.
|
|
Referrals
|
|
Enable or Disable LDAP referrals. If disabled, it may increase the speed of searches.
|
|
Mode
|
|
Mode which cacti will attempt to authenticate against the LDAP server.<blockquote><i>No Searching</i> - No Distinguished Name (DN) searching occurs, just attempt to bind with the provided Distinguished Name (DN) format.<br><br><i>Anonymous Searching</i> - Attempts to search for username against LDAP directory via anonymous binding to locate the users Distinguished Name (DN).<br><br><i>Specific Searching</i> - Attempts search for username against LDAP directory via Specific Distinguished Name (DN) and Specific Password for binding to locate the users Distinguished Name (DN).
|
|
Distinguished Name (DN)
|
|
The "Distinguished Name" syntax, applicable for both OpenLDAP and Windows AD configurations, offers flexibility in defining user identity. For OpenLDAP, the format follows this structure: <i>"uid=<username>,ou=people,dc=domain,dc=local"</i>. Windows AD provides an alternative syntax: <i>"<username>@win2kdomain.local"</i>, commonly known as "userPrincipalName (UPN)". In this context, "<username>" represents the specific username provided during the login prompt. This is particularly pertinent when operating in "No Searching" mode, or "Require Group Membership" enabled.
|
|
Require Group Membership
|
|
Require user to be member of group to authenticate. Group settings must be set for this to work, enabling without proper group settings will cause authentication failure.
|
|
LDAP Group Settings
|
|
Group Distinguished Name (DN)
|
|
Distinguished Name of the group that user must have membership.
|
|
Group Member Attribute
|
|
This refers to the specific attribute within the LDAP directory that holds the usernames of group members. It is crucial to ensure that the attribute value aligns with the configuration specified in the "Distinguished Name" or that the actual attribute value is searchable using the settings outlined in the "Distinguished Name".
|
|
Group Member Type
|
|
Defines if users use full Distinguished Name or just Username in the defined Group Member Attribute.
|
|
LDAP Specific Search Settings
|
|
Search Base
|