From 2d08ec91ca8fb429da389b3107f3982565e8ca3b Mon Sep 17 00:00:00 2001 From: alecpl Date: Wed, 30 Nov 2011 13:10:45 +0000 Subject: - Add possibility to do LDAP bind before searching for bind DN. In deployments where anonymous binds to and/or searches on an LDAP tree are not allowed, and where the LDAP address book(s) have been configured to use the user-specific bind credentials, rcube_ldap.php needs to bind using service credentials in order to be able to find the user's bind dn. --- config/main.inc.php.dist | 3 +++ 1 file changed, 3 insertions(+) (limited to 'config') diff --git a/config/main.inc.php.dist b/config/main.inc.php.dist index e1d13ee73..16b86c212 100644 --- a/config/main.inc.php.dist +++ b/config/main.inc.php.dist @@ -545,6 +545,9 @@ $rcmail_config['ldap_public']['Verisign'] = array( // The login name is used to search for the DN to bind with 'search_base_dn' => '', 'search_filter' => '', // e.g. '(&(objectClass=posixAccount)(uid=%u))' + // DN and password to bind as before searching for bind DN, if anonymous search is not allowed + 'search_bind_dn' => '', + 'search_bind_pw' => '', // Default for %dn variable if search doesn't return DN value 'search_dn_default' => '', // Optional authentication identifier to be used as SASL authorization proxy -- cgit v1.2.3