On 4/3/13 12:31 PM, "Jeremy Schubert" <[email protected]> wrote:

>The example below is from the PF admin manual.
>Is the ldapuser just a user I create that can bind to the directory?

Yes.  I believe that it needs the full LDAP Distinguished
Name (DN) to be spelled out.  For an AD example:

CN=John Smith,CN=Users,DC=domain,DC=org

>And does ldap server refer to my domain controller?

Yes.

>my $LDAPUserBase = "ou=People,dc=domain,dc=org";
>my $LDAPUserKey = "uid";

You may want to change this to sAMAccountName instead of uid
for an AD server.

>my $LDAPUserScope = "one";

May need to be sub, depending on your LDAP tree layout...

-Arthur

-------------------------------------------------------------------------
Arthur Emerson III                 Email:      [email protected]
Network Administrator              InterNIC:   AE81
Mount Saint Mary College           MaBell:     (845) 561-0800 Ext. 3109
330 Powell Ave.                    Fax:        (845) 562-6762
Newburgh, NY  12550                SneakerNet: Aquinas Hall Room 11


------------------------------------------------------------------------------
Minimize network downtime and maximize team effectiveness.
Reduce network management and security costs.Learn how to hire 
the most talented Cisco Certified professionals. Visit the 
Employer Resources Portal
http://www.cisco.com/web/learning/employer_resources/index.html
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to