Differences

This shows you the differences between two versions of the page.

--- hosts:virtual_machines:enclave:ldap [2023/02/21 01:30] – created netbox
+++ hosts:virtual_machines:enclave:ldap [2023/08/30 17:52] (current) – tcmal
@@ Line 1: / Line 1: @@
 [[meta:autogen:start|]]
+===== LDAP =====
 ^ Name | LDAP |
 ^ Ports | 389 (tcp) |
 ^  | [[https://netbox.tardisproject.uk/ipam/services/14/|View in NetBox.]] |
 [[meta:autogen:end|]]
-====== NAME ======
-^ Port(s) |  |
+[[https://www.openldap.org/|OpenLDAP]] server, holding user, alias, and group information.
-^ Publicly Accessible?   |  |
-^ Upstream       |  |
-Brief description of what the service is.
+We have addon schemas for ''vmail'' and ''krb5''. Notably, we use [[https://ltb-project.org/documentation/sasl_delegation.html|passthrough authentication]] for all but the admin user, so that [[hosts:virtual_machines:enclave:mit_kerberos_kdc|Kerberos]] is still our authoritative source.
 ===== Data directories =====
-  * ''/var/lib/...''
+  * ''/var/db/ldap/''
 ===== Configuration locations =====
-  * ''/etc/...''
+Handled declaratively using [[https://git.tardisproject.uk/tardis/nix/-/tree/main/profiles/services/ldap|Nix]].