Connection Details

Scope SUBTREE BASE LEVEL Base DN @if (ldapBaseControl.hasError("required") && ldapBaseControl.touched) { Base DN is required . } Server URI @if (ldapUriControl.hasError("required") && ldapUriControl.touched) { Server URI is required . } @if (showTls) {
STARTTLS TLS Version TLS v1.0 TLS v1.1 TLS v1.2 TLS v1.3
Verify TLS certificate of the server. CA Certificate The file containing the CA certificate which signed the LDAP TLS certificate.
}

Credentials

Bind Type Simple Anonymous SASL Digest-MD5 NTLM SASL Kerberos @if (bindTypeControl.value !== "Anonymous") { {{ bindTypeControl.value === "SASL Kerberos" ? "Keyfile Path" : "Bind password" }} }
@if (bindTypeControl.value !== "Anonymous") { Bind DN }

Settings

Timeout In seconds. Cache Timeout In seconds. Size Limit
Server Pool Retry Rounds Server Pool Skip Timeout In seconds.
Per-Process Server Pool This setting activates an LDAP server pool which persists between requests.
Edit User Store The user data in this database can be modified from within privacyIDEA.
@if (editableControl.value) {
Object Classes of a New Created User Object DN of a New Created User Object
}

Attributes & Mapping

@if (!isEditMode()) {

Presets:

@for (preset of ldapPresets; track preset.name) { }
}
Loginname Attribute @if (loginNameAttributeControl.hasError("required") && loginNameAttributeControl.touched) { Loginname attribute is required . } UID Type
Search Filter @if (ldapSearchFilterControl.hasError("required") && ldapSearchFilterControl.touched) { Search filter is required . } Attribute Mapping @if (userInfoControl.hasError("required") && userInfoControl.touched) { Attribute mapping is required . } Multivalue Attributes Recursive Search of User Groups @if (recursiveGroupSearchControl.value) { Base DN of User Groups Enter the base DN for the user groups. Leave this field empty if the groups are located in the same base DN as defined for the users above. Search Filter for User Groups Possible tags: {{ "{" }}base_dn{{ "}" }}, {{ "{" }}username{{ "}" }}
Group Name Attribute Group attribute defining the group's name, which should be stored in the user info. User Info Key The key to store the groups in the user info (attribute mapping key).
}
No Anonymous Referral Chasing No Retrieval of Schema Information