diff --git a/security/ldap.rst b/security/ldap.rst index d449a6851e5..5bff1ae9925 100644 --- a/security/ldap.rst +++ b/security/ldap.rst @@ -213,7 +213,7 @@ use the ``ldap`` user provider. data. It's a static user defined by its username and password (for improved security, define the password as an environment variable). - If your LDAP server allows to retrieve information anonymously, you can + If your LDAP server allows retrieval of information anonymously, you can set the ``search_dn`` and ``search_password`` options to ``null``. The ``ldap`` user provider supports many different configuration options: @@ -240,7 +240,7 @@ search_dn **type**: ``string`` **default**: ``null`` This is your read-only user's DN, which will be used to authenticate -against the LDAP server in order to fetch the user's information. +against the LDAP server to fetch the user's information. search_password ............... @@ -248,7 +248,7 @@ search_password **type**: ``string`` **default**: ``null`` This is your read-only user's password, which will be used to authenticate -against the LDAP server in order to fetch the user's information. +against the LDAP server to fetch the user's information. default_roles ............. @@ -302,7 +302,7 @@ load the user ``fabpot``, the final string will be: ``(uid=fabpot)``. If you pass ``null`` as the value of this option, the default filter is used ``({uid_key}={username})``. -In order to prevent `LDAP injection`_, the username will be escaped. +To prevent `LDAP injection`_, the username will be escaped. The syntax for the ``filter`` key is defined by `RFC4515`_. @@ -329,7 +329,7 @@ dn_string **type**: ``string`` **default**: ``{username}`` -This key defines the form of the string used in order to compose the +This key defines the form of the string used to compose the DN of the user, from the username. The ``{username}`` string is replaced by the actual username of the person trying to authenticate. pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy