Differences

This shows you the differences between two versions of the page.

--- hosts:virtual_machines:enclave:ldap [2023/02/21 01:32] – removed - external edit (Unknown date) 127.0.0.1
+++ hosts:virtual_machines:enclave:ldap [2023/08/30 17:52] (current) – tcmal
@@ Line 1: / Line 1: @@
+[[meta:autogen:start|]]
+===== LDAP =====
+^ Name | LDAP |
+^ Ports | 389 (tcp) |
+^  | [[https://netbox.tardisproject.uk/ipam/services/14/|View in NetBox.]] |
+[[meta:autogen:end|]]
+[[https://www.openldap.org/|OpenLDAP]] server, holding user, alias, and group information.
+We have addon schemas for ''vmail'' and ''krb5''. Notably, we use [[https://ltb-project.org/documentation/sasl_delegation.html|passthrough authentication]] for all but the admin user, so that [[hosts:virtual_machines:enclave:mit_kerberos_kdc|Kerberos]] is still our authoritative source.
+===== Data directories =====
+  * ''/var/db/ldap/''
+===== Configuration locations =====
+Handled declaratively using [[https://git.tardisproject.uk/tardis/nix/-/tree/main/profiles/services/ldap|Nix]].