Difference between revisions of "2.0/Modules/m ldap authentication"

/*
 * m_ldap_authentication [EXTRA]
 *
 * This module allows many commands such as IDENTIFY, RELEASE, RECOVER, GHOST, etc. use
 * LDAP to authenticate users. Requires m_ldap.
*/
#module
{
        name = "m_ldap_authentication"
 
        /*
         * The distinguished name used for searching for users's accounts.
         */
        basedn = "ou=users,dc=anope,dc=org"
 
        /*
         * The search filter used to look up users's accounts.
         * %account is replaced with the user's account.
         * %object_class is replaced with the object_class configured below.
         */
        search_filter = "(&(uid=%account)(objectClass=%object_class))"
 
        /*
         * The object class used by LDAP to store user account information.
         * This is used for adding new users to LDAP if registration is allowed.
         */
        object_class = "anopeUser"
 
        /*
         * The attribute value used for account names.
         */
        username_attribute = "uid"
 
        /*
         * The attribute value used for email addresses.
         * This directive is optional.
         */
        email_attribute = "email"
 
        /*
         * The attribute value used for passwords.
         * Used when registering new accounts in LDAP.
         */
        password_attribute = "userPassword"
 
        /*
         * If set, the reason to give the users who try to "/msg NickServ REGISTER".
         * If not set, then registration is not blocked.
         */
        #disable_register_reason = "To register on this network visit http://some.misconfigured.site/register"
 
        /*
         * If set, the reason to give the users who try to "/msg NickServ SET EMAIL".
         * If not set, then email changing is not blocked.
         */
        #disable_email_reason = "To change your email address visit http://some.misconfigured.site"
}