LDAP Configuration Parameters¶
Here is the list of available LDAP parameters:
Parameter | Default value | Description |
---|---|---|
LDAP_AUTH |
false | Enable LDAP authentication |
LDAP_SERVER |
Empty | LDAP server hostname |
LDAP_PORT |
389 | LDAP server port |
LDAP_SSL_VERIFY |
true | Validate certificate for
ldaps:// style URL |
LDAP_START_TLS |
false | Enable LDAP start TLS |
LDAP_USERNAME_CASE_
SENSITIVE |
false | Kanboard lowercase the ldap username to avoid duplicate users (the database is case sensitive) |
LDAP_BIND_TYPE |
anonymou s | Bind type: “anonymous”, “user” or “proxy” |
LDAP_USERNAME |
null | LDAP username to use with proxy mode or username pattern to use with user mode |
LDAP_PASSWORD |
null | LDAP password to use for proxy mode |
LDAP_USER_BASE_DN |
Empty | LDAP DN for users (Example: “CN=Users,DC=kanboard,DC=local”) |
LDAP_USER_FILTER |
Empty | LDAP pattern to use when searching for a user account (Example: “(&(objectClass=user)(sAMAccount Name=%s))”) |
LDAP_USER_ATTRIBUTE
_USERNAME |
uid | LDAP attribute for username (Example: “samaccountname”) |
LDAP_USER_ATTRIBUTE
_FULLNAME |
cn | LDAP attribute for user full name (Example: “displayname”) |
LDAP_USER_ATTRIBUTE
_EMAIL |
LDAP attribute for user email | |
LDAP_USER_ATTRIBUTE
_GROUPS |
memberof | LDAP attribute to find groups in user profile |
LDAP_USER_ATTRIBUTE
_PHOTO |
Empty | LDAP attribute to find user photo (jpegPhoto or thumbnailPhoto |
LDAP_USER_ATTRIBUTE
_LANGUAGE |
Empty | LDAP attribute for user language (preferredlanguage), the accepted language format is “fr-FR” |
LDAP_USER_CREATION |
true | Enable automatic LDAP user creation |
LDAP_GROUP_ADMIN_DN |
Empty | LDAP DN for administrators (Example: “CN=Kanboard-Admins,CN=Users,DC= kanboard,DC=local”) |
LDAP_GROUP_MANAGER_
DN |
Empty | LDAP DN for managers (Example: “CN=Kanboard Managers,CN=Users,DC=kanboard,DC =local”) |
LDAP_GROUP_PROVIDER |
false | Enable LDAP group provider for project permissions |
LDAP_GROUP_BASE_DN |
Empty | LDAP Base DN for groups |
LDAP_GROUP_FILTER |
Empty | LDAP group filter (Example: “(&(objectClass=group)(sAMAccoun tName=%s*))“) |
LDAP_GROUP_USER_FIL
TER |
Empty | If defined, Kanboard will search
user groups in
LDAP_GROUP_BASE_DN with this
filter, it’s useful only for
posixGroups (Example:
(&(objectClass=posixGroup)(mem
berUid=%s)) ) |
LDAP_GROUP_ATTRIBUT
E_NAME |
cn | LDAP attribute for the group name |
Note
LDAP attributes must be in lowercase