[cvs] [Wiki] changed: NewLDAPHowTo

[Wiki Guest]

guest [24.123.47.41]  Wed, 16 May 2007 12:55:38 -0700

Modified page: http://wiki.horde.org/NewLDAPHowTo
New Revision:  1.32
Change log:  Added new info for Active Directory objectclass.

@@ -179,9 +179,9 @@
 **What objectclasses should a new user account be member of? These
objectclasses should cover the cn,sn,userPassword attributes as well as the
username search key** - Horde will use these objectclasses when creating a
new account.  This value is unused if we enable the //authldap// hook.

 **How to specify a filter for the user lists** - Unless you have to use
some fancy filters to find users, //One or more objectclass filters//
should work fine here.

-**The objectclass filter used to search for users. Can be a single
objectclass or a list** - This is simply a list of objectClass values that
represent valid users.  Any directory entry below the base DN that have
**all** of the listed objectclasses are considered to be a valid user.
+**The objectclass filter used to search for users. Can be a single
objectclass or a list** - This is simply a list of objectClass values that
represent valid users.  Any directory entry below the base DN that have
**all** of the listed objectclasses are considered to be a valid user. For
Active Directory users, you should (at least) set this to use **person**.

 **Enable the creating of accounts with expiring passwords? (Note: New users
should have the shadowAccount objectclass)** - Horde supports expiring
passwords.  If you select //yes// here, be sure that your user accounts
have a shadowAccount objectclass.

 +++ Groups