4
:program:`auth_ldap` is an authentication plugin that authenticates connections
5
using an :abbr:`LDAP (Lightweight Directory Access Protocol)` server. An
6
LDAP server is required to provide authentication.
8
.. note:: Unload the :doc:`/plugins/auth_all/index` plugin before using this plugin.
9
.. seealso:: :doc:`/administration/authentication`
11
.. _auth_ldap_loading:
16
To load this plugin, start :program:`drizzled` with::
18
--plugin-add=auth_ldap
20
Loading the plugin may not enable or configure it. See the plugin's
21
:ref:`auth_ldap_configuration` and :ref:`auth_ldap_variables`.
23
.. seealso:: :doc:`/options` for more information about adding and removing plugins.
25
.. _auth_ldap_configuration:
30
These command line options configure the plugin when :program:`drizzled`
31
is started. See :doc:`/configuration` for more information about specifying
36
.. option:: --auth-ldap.base-dn ARG
39
:Variable: :ref:`auth_ldap_base_dn <auth_ldap_base_dn>`
41
DN to use when searching.
43
.. option:: --auth-ldap.bind-db ARG
46
:Variable: :ref:`auth_ldap_bind_dn <auth_ldap_bind_dn>`
48
DN to use when binding to the LDAP server.
50
.. option:: --auth-ldap.bind-password ARG
53
:Variable: :ref:`auth_ldap_bind_password <auth_ldap_bind_password>`
55
Password to use when binding the DN.
57
.. option:: --auth-ldap.cache-timeout ARG
60
:Variable: :ref:`auth_ldap_cache_timeout <auth_ldap_cache_timeout>`
62
How often to empty the users cache, 0 to disable.
64
.. option:: --auth-ldap.mysql-password-attribute ARG
66
:Default: ``mysqlUserPassword``
67
:Variable: :ref:`auth_ldap_mysql_password_attribute <auth_ldap_mysql_password_attribute>`
69
Attribute in LDAP with MySQL hashed password.
71
.. option:: --auth-ldap.password-attribute ARG
73
:Default: ``userPassword``
74
:Variable: :ref:`auth_ldap_password_attribute <auth_ldap_password_attribute>`
76
Attribute in LDAP with plain text password.
78
.. option:: --auth-ldap.uri ARG
80
:Default: ``ldap://127.0.0.1/``
81
:Variable: :ref:`auth_ldap_uri <auth_ldap_uri>`
83
URI of the LDAP server to contact.
85
.. _auth_ldap_variables:
90
These variables show the running configuration of the plugin.
91
See `variables` for more information about querying and setting variables.
93
.. _auth_ldap_base_dn:
95
* ``auth_ldap_base_dn``
99
:Option: :option:`--auth-ldap.base-dn`
101
DN to use when searching.
103
.. _auth_ldap_bind_dn:
105
* ``auth_ldap_bind_dn``
109
:Option: :option:`--auth-ldap.bind-db`
111
DN to use when binding to the LDAP server.
113
.. _auth_ldap_bind_password:
115
* ``auth_ldap_bind_password``
119
:Option: :option:`--auth-ldap.bind-password`
121
Password to use when binding the DN.
123
.. _auth_ldap_cache_timeout:
125
* ``auth_ldap_cache_timeout``
129
:Option: :option:`--auth-ldap.cache-timeout`
131
How often to empty the users cache.
133
.. _auth_ldap_mysql_password_attribute:
135
* ``auth_ldap_mysql_password_attribute``
139
:Option: :option:`--auth-ldap.mysql-password-attribute`
141
Attribute in LDAP with MySQL hashed password.
143
.. _auth_ldap_password_attribute:
145
* ``auth_ldap_password_attribute``
149
:Option: :option:`--auth-ldap.password-attribute`
151
Attribute in LDAP with plain text password.
159
:Option: :option:`--auth-ldap.uri`
161
URI of the LDAP server to contact.
163
.. _auth_ldap_examples:
168
Sorry, there are no examples for this plugin.
170
.. _auth_ldap_authors:
177
.. _auth_ldap_version:
182
This documentation applies to **auth_ldap 0.1**.
184
To see which version of the plugin a Drizzle server is running, execute:
186
.. code-block:: mysql
188
SELECT MODULE_VERSION FROM DATA_DICTIONARY.MODULES WHERE MODULE_NAME='auth_ldap'