Difference between revisions of "Systems/Services/LDAP"

From Pumping Station One
Jump to navigation Jump to search
m (Robot: Cosmetic changes)
Line 29: Line 29:
  
 
This service runs a self signed SSL cert with the CN space.pumpingstationone.org.
 
This service runs a self signed SSL cert with the CN space.pumpingstationone.org.
 +
 +
[[category:systems group]]

Revision as of 21:42, 13 October 2017

PS1 LDAP

Client config

BASE    dc=ad,dc=pumpingstationone,dc=org
URI     ldap://bob.ad.pumpingstationone.org ldap://dc01.ad.pumpingstationone.org

SSL starttls
TLS_CACERT /usr/local/etc/trusted.pem
TLS_CHECKPEER yes
TLS_REQCERT require
SASL_MECH GSSAPI
use_sasl yes
#SIZELIMIT      12
#TIMELIMIT      15
#DEREF          never


Public LDAP Server

There is a public ldap server used for Auth on external services. This is forwarded from space.pumpingstationone.org:389 to the internal LDAP servers.

Service that use this:

  • Page.ly - Blog


This service runs a self signed SSL cert with the CN space.pumpingstationone.org.