<?php
/**
 * Protected settings
 * LDAP configuration example
 */
$conf['useacl']         = 1;           //enable ACL
$conf['authtype']       = 'authldap';  //enable this Auth plugin


#$conf['plugin']['authldap']['server']      = 'localhost';
#$conf['plugin']['authldap']['port']        = 389;
$conf['plugin']['authldap']['server']      = 'ldap://server.tld:389'; #instead of the above two settings
$conf['plugin']['authldap']['usertree']    = 'ou=People, dc=server, dc=tld';
$conf['plugin']['authldap']['grouptree']   = 'ou=Group, dc=server, dc=tld';
$conf['plugin']['authldap']['userfilter']  = '(&(uid=%{user})(objectClass=posixAccount))';
$conf['plugin']['authldap']['groupfilter'] = '(&(objectClass=posixGroup)(memberUID=%{user}))';
$conf['plugin']['authldap']['attributes']  = array('cn', 'displayname', 'mail', 'givenname', 'objectclass', 'sn', 'uid', 'memberof');

# This is optional but may be required for your server:
#$conf['plugin']['authldap']['version']    = 3;

# This enables the use of the STARTTLS command
#$conf['plugin']['authldap']['starttls']   = 1;

# This is optional and is required to be off when using Active Directory:
#$conf['plugin']['authldap']['referrals']  = 0;

# Optional bind user and password if anonymous bind is not allowed
#$conf['plugin']['authldap']['binddn']     = 'cn=admin, dc=my, dc=home';
#$conf['plugin']['authldap']['bindpw']     = 'secret';


# Limit search scope for user and group searches (sub|one|base)
#$conf['plugin']['authldap']['userscope']  = 'sub';
#$conf['plugin']['authldap']['groupscope'] = 'sub';

# Optional debugging
#$conf['plugin']['authldap']['debug']      = 1;

#### not available via Config Manager ####
# Mapping can be used to specify where the internal data is coming from. 
#$conf['plugin']['authldap']['mapping']['name']  = 'displayname'; # Name of attribute the directory stores its pretty print user name.
#$conf['plugin']['authldap']['mapping']['grps']  = array('memberof' => '/CN=(.+?),/i'); # Where groups are defined in directory