[cvs] [Wiki] changed: ExistingLDAPHowTo

[Wiki Guest]

guest [72.43.56.183]  Wed, 27 Aug 2008 00:05:31 -0400

Modified page: http://wiki.horde.org/ExistingLDAPHowTo
New Revision:  1.12
Change log:  clarification of objectclass filter language

@@ -42,9 +42,9 @@
  * **The username search key** - This is the field that stores the username.

  * **How to specify a filter for the user lists** - Unless you have  
to use some fancy filters to find users, //One or more objectclass  
filters// should work fine here.

-* **The objectclass filter used to search for users. Can be a single  
objectclass or a list** - This is simply a list of objectClass values  
that represent valid users.  We are piggybacking on an existing LDAP  
directory used to authenticate users on a POSIX system, so we know  
that a //posixAccount// object is a valid user account.
+* **The objectclass filter used to search for users. Can be a single  
objectclass or a list** - This is simply a list of objectClass values  
that represent valid users.  We are piggybacking on an existing LDAP  
directory used to authenticate users on a POSIX system, so we know  
that a //posixAccount// object is a valid user account. Note: If the  
objectclass for your users is "shadowAccount", this should NOT be  
"objectclass=shadowAccount" just "shadowAccount"

  +++ Directory Permissions

  These are the **minimum** LDAP directory permissions needed by horde  
to authenticate against LDAP