web2ldap - hosts.pyThe configuration module directory web2ldapcnf/ |
|
This section describes the parameters related to specific LDAP hosts/backends.
[addform_oc_list] [binddnsearch] [description] [groupadm_defs] [login_template] [passwd_hashtypes] [print_cols] [print_template] [read_operationalattrstemplate] [read_template] [requested_attrs] [schema_uri] [search_attrs] [search_attrsonly] [search_resultsperpage] [search_tablistattrs] [search_tdtemplate] [searchform_template] [ssl_minlevel] [ssl_valid_dn] [ssl_valid_idn] [starttls] [tls_cacertdir] [tls_cacertfile] [tls_certfile] [tls_keyfile] [timeout] [vcard_template]List of LDAP URLs which will appear in the default select list of the login form. It may contain either strings (only a LDAP URL) or 2-tuples of strings containing LDAP URL and description.
Example:
ldap_uri_list = [ 'ldap://localhost', ('ldap://ldap.openldap.org',u"OpenLDAP's demo server"), ]
This is a string-keyed dictionary (Python data structure)
which holds all options specific for certain LDAP hosts or backends(
naming contexts). The values of the dictionary ldap_def
are of the simple class Web2LDAPConfig which is instantiated via key word
arguments.
Any configuration parameter in the
dictionary web2ldapcnf.hosts.ldap_def is retrieved by looking at
string-key 'ldap://ldap_host/ldap_basedn', 'ldap_host' and '_' in
this particular order.
This allows to hold several database backends on the same host with
the same DNS name. It also shortens the ldap_def dictionary by
avoiding having to repeat same options for every server and
makes browsing of completely unconfigured hosts easy.
Example:
ldap_def = { '_': { # Default fall-back options }, 'nldap.com': { # Per-host options for host nldap.com }, 'ldap://localhost/dc=stroeder,dc=com': { # Options dictionary entries for backend # on host localhost with naming context dc=stroeder,dc=com } }Now each parameter is described. A system default value is assumed if the parameter was not defined at all (no dictionary key parameter). Most times this default value simply switches off a certain behaviour.
[]
'(uid=%s)'
''
''
{}
groupadm_defs={ 'groupOfNames': ('member',None), 'groupOfUniqueNames': ('uniqueMember',None), 'rfc822MailGroup': ('mail','mail'), 'mailGroup': ('mgrprfc822mailmember','mail'), 'accessGroup': ('member',None), 'posixGroup': ('memberUid','uid'), },
[]
'passwd_hashtypes':['smd5','ssha']
'4'
None
''
{}
[]
['cn','mail']
1
10
[]
{}
''
0
''
''
0
''
''
''
''
-1
{}