这大概是第二篇关于OpenList配置LDAP的文章？（笑

但这里会使用GLAuth来作为ldap服务端。并且会给出glauth的配置文件

glauth配置文件：

可以用echo -n '你的密码'| sha256sum来获取passsha256

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
debug = false  # 调试模式
syslog = false  # 系统日志
structuredlog = false  # 结构化日志
watchconfig = true
[ldap]
  enabled = true  
  listen = "0.0.0.0:3893"  
  tls = false  
  tlsCertPath = "glauth.crt"  
  tlsKeyPath = "glauth.key"  

[ldaps]
  enabled = false  
  listen = "0.0.0.0:3894"  
  cert = "glauth.crt"  
  key = "glauth.key"  

[tracing]
  enabled = true

[backend]
  datastore = "config"  
  baseDN = "dc=example,dc=com"  
  anonymousdse = false

[behaviors]
  IgnoreCapabilities = false  
  LimitFailedBinds = true  
  NumberOfFailedBinds = 3  
  PeriodOfFailedBinds = 10  
  BlockFailedBindsFor = 60  
  PruneSourceTableEvery = 600  
  PruneSourcesOlderThan = 600

[[users]]
  name = "ldap-admin"
  sn = "ldap-admin"
  passsha256 = ""
  mail = "admin@example.com"
    [[users.capabilities]]
      action = "search"
      object = "dc=example,dc=com"


[[users]]
  name = "Users"
  passsha256 = ""
  mail = "emial"

OpenList

Ldap 服务器：ip:port
Ldap 管理器 dn：cn=ldap-admin,dc=example,dc=com
Ldap 管理员密码：ldap-admin用户所对应的密码
Ldap 用户搜索基础：dc=example,dc=com
Ldap 用户搜索过滤器：(cn=%s)