LDAP Configuration Parameters

Here is the list of available LDAP parameters:

Parameter Default value Description
LDAP_AUTH false Enable LDAP authentication
LDAP_SERVER Empty LDAP server hostname
LDAP_PORT 389 LDAP server port
LDAP_SSL_VERIFY true Validate certificate for ldaps:// style URL
LDAP_START_TLS false Enable LDAP start TLS
LDAP_USERNAME_CASE_ SENSITIVE false Kanboard lowercase the ldap username to avoid duplicate users (the database is case sensitive)
LDAP_BIND_TYPE anonymou s Bind type: “anonymous”, “user” or “proxy”
LDAP_USERNAME null LDAP username to use with proxy mode or username pattern to use with user mode
LDAP_PASSWORD null LDAP password to use for proxy mode
LDAP_USER_BASE_DN Empty LDAP DN for users (Example: “CN=Users,DC=kanboard,DC=local”)
LDAP_USER_FILTER Empty LDAP pattern to use when searching for a user account (Example: “(&(objectClass=user)(sAMAccount Name=%s))”)
LDAP_USER_ATTRIBUTE _USERNAME uid LDAP attribute for username (Example: “samaccountname”)
LDAP_USER_ATTRIBUTE _FULLNAME cn LDAP attribute for user full name (Example: “displayname”)
LDAP_USER_ATTRIBUTE _EMAIL mail LDAP attribute for user email
LDAP_USER_ATTRIBUTE _GROUPS memberof LDAP attribute to find groups in user profile
LDAP_USER_ATTRIBUTE _PHOTO Empty LDAP attribute to find user photo (jpegPhoto or thumbnailPhoto
LDAP_USER_ATTRIBUTE _LANGUAGE Empty LDAP attribute for user language (preferredlanguage), the accepted language format is “fr-FR”
LDAP_USER_CREATION true Enable automatic LDAP user creation
LDAP_GROUP_ADMIN_DN Empty LDAP DN for administrators (Example: “CN=Kanboard-Admins,CN=Users,DC= kanboard,DC=local”)
LDAP_GROUP_MANAGER_ DN Empty LDAP DN for managers (Example: “CN=Kanboard Managers,CN=Users,DC=kanboard,DC =local”)
LDAP_GROUP_PROVIDER false Enable LDAP group provider for project permissions
LDAP_GROUP_BASE_DN Empty LDAP Base DN for groups
LDAP_GROUP_FILTER Empty LDAP group filter (Example: “(&(objectClass=group)(sAMAccoun tName=%s*))“)
LDAP_GROUP_USER_FIL TER Empty If defined, Kanboard will search user groups in LDAP_GROUP_BASE_DN with this filter, it’s useful only for posixGroups (Example: (&(objectClass=posixGroup)(mem berUid=%s)))
LDAP_GROUP_ATTRIBUT E_NAME cn LDAP attribute for the group name

Note

LDAP attributes must be in lowercase