User Authentication LDAP plugin

Update parameters in the c8-server.conf file to specify information about the LDAP plugin.

The LDAP plugin supplied by Sybase CEP follows the standard pattern for LDAP. The parameters that you must specify in the c8-server.conf configuration file are:

• Hostname: Required. For example, 'ldap.eng.c8.com.'

• Port: Optional. Default 389.

• Timeout: Optional. Connections timeout in sec. (default: 10).

• Version: Optional. 2 or 3 (default 3).

• Debug: Optional. Yes or no (default: no).

• SSL/TLS settings:

  • SslStart: Optional. Yes or no (default: no).

  • TlsStart: Optional. Yes or no (default: no).

  • TlsCheckServerCert: Optional. Yes or no (default: no).

  • TlsCaCert: Required if TlsCheckServerCert is yes. Path to the cert.

  Note: The SSL/TLS settings are not available on Microsoft Windows.

• BindDN, BindPassword: Optional. If left empty/not specified then use anonymous search.

• User settings:

  • UserUidAttr: Optional. String (default 'uid').

  • UserBaseDN: Optional. String (for example, 'ou=People,dc=c8,dc=com').

  • UserFilter: Optional. String (for example, 'objectclass=posixAccount').

• Group settings:

  • GroupMemberUidAttr: Optional. String (default 'memberuid') - if not an empty string, then we provide user's uid (username) for groups search (also see GroupMemberDnAttr). This is typical setup for OpenLDAP and RedHat/Fedora Directory Server.

  • GroupMemberDnAttr: Optional. String (default '') - if not an empty string, then we provide user's DN for groups search (also see GroupMemberUidAttr). This is typical setup for Microsoft AD/ADAM Server.

  • GroupBaseDN: Optional. String (for example, 'ou=Groups,dc=sybase,dc=com').

  • GroupFilter: Optional. String (for example, 'objectclass=posixGroup').

  • GroupLimit: Optional. Integer - how many groups to return (default : 0 - no limit).