content_image/834304.jpg content_image/834305.jpg
<img src='content_image/834304.jpg'>

For simple LDAP authentication, whether to enable LDAP search referral. See LDAP Search Referral. 

• authentication_ldap_simple_server_host 

<img src='content_image/834305.jpg'>

For simple LDAP authentication, the LDAP server host. The permitted values for this variable depend on the authentication method: 

•For authentication_ldap_simple_auth_method_name=SIMPLE : The LDAP server host can be a host name or IP address. 

•For authentication_ldap_simple_auth_method_name=AD-FOREST . The LDAP server host can be an Active Directory domain name. For example, for an LDAP server URL of ldap:// example.mem.local:389 , the domain name can be mem.local . 

An Active Directory forest setup can have multiple domains (LDAP server IPs), which can be discovered using DNS. On Unix and Unix-like systems, some additional setup may be required to configure your DNS server with SRV records that specify the LDAP servers for the Active Directory domain. For information about DNS SRV, see RFC 2782. 

Suppose that your configuration has these properties: 

•The name server that provides information about Active Directory domains has IP address 10.172.166.100 . 

•The LDAP servers have names ldap1.mem.local  through ldap3.mem.local  and IP addresses 10.172.166.101  through 10.172.166.103 . 

You want the LDAP servers to be discoverable using SRV searches. For example, at the command line, a command like this should list the LDAP servers: 

host -t SRV _ldap._tcp.mem.local 

Perform the DNS configuration as follows: 

1. Add a line to /etc/resolv.conf  to specify the name server that provides information about Active Directory domains: 

nameserver 10.172.166.100 

2. Configure the appropriate zone file for the name server with SRV records for the LDAP servers: 

_ldap._tcp.mem.local. 86400 IN SRV 0 100 389 ldap1.mem.local. 

