Difference between revisions of "Systems/Services/LDAP"

From Pumping Station One
Jump to navigation Jump to search
 
Line 1: Line 1:
 +
{{mbox |type=warning |text=This information is out of date. [[IT Infrastructure|Up-to-date IT information can be found here]] }}
 +
 
= PS1 LDAP =
 
= PS1 LDAP =
  

Latest revision as of 22:21, 13 September 2020

PS1 LDAP

Client config

BASE    dc=ad,dc=pumpingstationone,dc=org
URI     ldap://bob.ad.pumpingstationone.org ldap://dc01.ad.pumpingstationone.org

SSL starttls
TLS_CACERT /usr/local/etc/trusted.pem
TLS_CHECKPEER yes
TLS_REQCERT require
SASL_MECH GSSAPI
use_sasl yes
#SIZELIMIT      12
#TIMELIMIT      15
#DEREF          never


Public LDAP Server

There is a public ldap server used for Auth on external services. This is forwarded from space.pumpingstationone.org:389 to the internal LDAP servers.

Service that use this:

  • Page.ly - Blog


This service runs a self signed SSL cert with the CN space.pumpingstationone.org.