2.0/Modules/m ldap authentication

Language
English

Section Database Module m_ldap_authentication Author Anope

Description

This module allows many commands such as IDENTIFY, RELEASE, RECOVER, GHOST, etc. use LDAP to authenticate users.

• Requires module m_ldap.

name= 

Name of module

basedn= 

The distinguished name used for searching for users's accounts.

search_filter= 

The search filter used to look up users's accounts.

object_class= 

The object class used by LDAP to store user account information.

username_attribute= 

The attribute value used for account names.

email_attribute= 

The attribute value used for passwords.

password_attribute= 

The attribute value used for passwords.

disable_register= 

If set, the reason to give the users who try to "/msg NickServ REGISTER". Disabled by default

disable_email= 

If set, the reason to give the users who try to "/msg NickServ SET EMAIL". Disabled by default

Default Configuration

/*
 * m_ldap_authentication [EXTRA]
 *
 * This module allows many commands such as IDENTIFY, RELEASE, RECOVER, GHOST, etc. use
 * LDAP to authenticate users. Requires m_ldap.
*/
#module
{
        name = "m_ldap_authentication"
 
        /*
         * The distinguished name used for searching for users's accounts.
         */
        basedn = "ou=users,dc=anope,dc=org"
 
        /*
         * The search filter used to look up users's accounts.
         * %account is replaced with the user's account.
         * %object_class is replaced with the object_class configured below.
         */
        search_filter = "(&(uid=%account)(objectClass=%object_class))"
 
        /*
         * The object class used by LDAP to store user account information.
         * This is used for adding new users to LDAP if registration is allowed.
         */
        object_class = "anopeUser"
 
        /*
         * The attribute value used for account names.
         */
        username_attribute = "uid"
 
        /*
         * The attribute value used for email addresses.
         * This directive is optional.
         */
        email_attribute = "email"
 
        /*
         * The attribute value used for passwords.
         * Used when registering new accounts in LDAP.
         */
        password_attribute = "userPassword"
 
        /*
         * If set, the reason to give the users who try to "/msg NickServ REGISTER".
         * If not set, then registration is not blocked.
         */
        #disable_register_reason = "To register on this network visit http://some.misconfigured.site/register"
 
        /*
         * If set, the reason to give the users who try to "/msg NickServ SET EMAIL".
         * If not set, then email changing is not blocked.
         */
        #disable_email_reason = "To change your email address visit http://some.misconfigured.site"
}