#############################################################################
# File: ldap.properties.sample
# $Id$
#############################################################################

#############################################################################
# General settings 
#    set handl-referrals to "follow" is your ldap server uses referrals
#############################################################################
provider-url=ldaps://ldap.example.com:389/dc=example,dc=com
base-dn=dc=example,dc=com
handle-referrals=

#############################################################################
# User parameters for authentication:
# usr-branch: 
#      if users are to be taken from a specific branch, set this.
#      If you set this to empty, users will be searched in the whole 
#      subtree, i.e.:
#         usr-branch=
# usr-authentication:
#      authentication method when the user authenticates
# domain-name:
#      AFAIK, this is only relevant for MS Active Directory
#############################################################################
#usr-branch=ou=People
usr-branch=
usr-attr=uid
usr-name-attr=sn
usr-authentication=simple
domain-name=

############################################################################
# Security settings
# -----------------
# security-authentication:
#       you can set this to none if there is no manager authentication, i.e.:
#         security-authentication=none
# mgr-dn and mgr-pw:
#       Manager/user which is allowed to retrieve a list of "all" users
#       (fullname) from LDAP server. Leave it empty for anonymous bindings.
# key-store:
#       - If you do not use ssl, you can comment out this property.
#       - keystore is taken relatively to the publication config/ac/passwd
#       directory. You should put the Directory-Server certificate in this 
#       file, if using ssl. 
#       The keystore file can be generated as follows:
#          keytool -import -keystore .keystore -file <ca_cert_file> 
#                    -alias <yourdomain.com>
#       
############################################################################
security-authentication=simple
mgr-dn=
mgr-pw=
key-store=.keystore
security-protocol=ssl