Systems/Services/LDAP

From Pumping Station One
Jump to navigation Jump to search

PS1 LDAP

Client config

BASE    dc=ad,dc=pumpingstationone,dc=org
URI     ldap://bob.ad.pumpingstationone.org ldap://dc01.ad.pumpingstationone.org

SSL starttls
TLS_CACERT /usr/local/etc/trusted.pem
TLS_CHECKPEER yes
TLS_REQCERT require
SASL_MECH GSSAPI
use_sasl yes
#SIZELIMIT      12
#TIMELIMIT      15
#DEREF          never


Public LDAP Server

There is a public ldap server used for Auth on external services. This is forwarded from space.pumpingstationone.org:389 to the internal LDAP servers.

Service that use this:

  • Page.ly - Blog


This service runs a self signed SSL cert with the CN space.pumpingstationone.org.