1
0
Fork 0
mirror of https://github.com/Kozea/Radicale.git synced 2025-06-26 16:45:52 +00:00

Created LDAP authentication (markdown)

Dipl Ing. Péter Varkoly 2024-09-20 11:14:02 +02:00
parent a5db63db2e
commit 8ea339cb83

19
LDAP-authentication.md Normal file

@ -0,0 +1,19 @@
# Enalbe LDAP Authentication
The first step to enable LDAP authentication is the installation of the corresponding python module. Even if the python-ldap module is supported, we recommend the use of python-ldap3 as the further development is only based on this module.
## Configure LDAP Authentication
After installing the python ldap module you have to enable and confiugre it in the [auth] section of the configuration file of Radicale. Please note that anonymous bind is not supported. That means you have to provide a LDAP-account with read-rights to the user accounts. At the moment only SUBTREE searches are implemented.
Following parameter are available. No default values are provided that means you have to set all parameters:
`type = ldap`
`ldap_uri` The URI to the LDAP-server. [ldap|ldaps]://<host>[:port]
`ldap_base` The base DN from where the users must be searched for.
`ldap_reader_dn` The DN of the LDAP account with read rights to the subtree from ldap_base
`ldap_secret` The password of the ldap_reader_dn
`ldap_filter` The ldap filter to find the DN of the login user. This filter must contain a python format string with placeholder(s) for the login: (&(objectClass=person)(cn={0}))