LDAP_HOST | "ldap://localhost:389" | LDAP Server FDQN | LDAP_HOST = "LDAP://localhost:389" |
LDAP_TLS | False | Whether to enable secure ldap (note, LDAP and appropriate port should be used in hostname i.e. 636) | LDAP_TLS = False |
LDAP_TLS_VALIDATE | ssl.CERT_OPTIONAL | If TLS is enabled then the relevant SSL verification code required (either via ssl enum or int) | LDAP_TLS_VALIDATE = ssl.CERT_OPTIONAL |
LDAP_TLS_VERSION | ssl.PROTOCOL_TLSv1 | If TLS is enabled then the relevant TLS version must be provided | LDAP_TLS_VERSION = False |
LDAP_BIND_USER_DN | None | DN of Auth User (None for anonymous) | LDAP_BIND_USER_DN = "cn=admin,dc=example,dc=com" |
LDAP_BIND_PASS | None | Auth User Password (ignored if user DN is None) | LDAP_BIND_PASS = "Foo" |
LDAP_PAGE_SIZE | 500 | Number of elements to return per paged result | LDAP_PAGE_SIZE = 500 |
LDAP_SEARCH_ROOT | "dc=example,dc=com" | LDAP tree root (Used for search when left as default) | LDAP_SEARCH_ROOT = "dc=example,dc=com" |
LDAP_ENABLE_REF_CACHE | True | Enables Referral Cache | LDAP_ENABLE_REF_CACHE = True |
LDAP_SET_LDAP3_ARGS | {} | Allows LDAP3 global parameters to be updated (see LDAP3 Global Config ) | LDAP_SET_LDAP3_ARGS = {'SOCKET_SIZE': 4096} |
LDAP_AUTH_MODE | None | NTLM for Active Directory, SASL for external cert or kerberos, leave as None for other cases, ldap3 will auto choose SIMPLE or ANONYMOUS auth | LDAP_AUTH_MODE = NTLM |