LDAP.CONF(5) File Formats Manual LDAP.CONF(5) (NAME) ldap.conf, .ldaprc - LDAP/ (SYNOPSIS) ETCDIR/ldap.conf, ldaprc, .ldaprc, $LDAP (DESCRIPTION) LDAPNOINIT . ldap.conf ldap . ldaprc .ldaprc, . ldaprc . LDAPCONF LDAPRC . LDAPCONF . . LDAPRC . . LDAP . BASE LDAPBASE . . ldap.conf ( LDAPCONF) . : variable $LDAPNOINIT, and if that is not set: system file ETCDIR/ldap.conf, user files $HOME/ldaprc, $HOME/.ldaprc, ./ldaprc, system file $LDAPCONF, user files $HOME/$LDAPRC, $HOME/.$LDAPRC, ./$LDAPRC, variables $LDAP. . (SYNTAX) . . (`#') . ( ) . . (tokenization) () . . # Wrong - erroneous quotes: URI "ldap:// ldaps://" # Right - space-separated list of URIs, without quotes: URI ldap:// ldaps:// # Right - DN syntax needs quoting for Example, Inc: BASE ou=IT staff,o="Example, Inc",c=US # or: BASE ou=IT staff,o=Example\2C Inc,c=US # Wrong - comment on same line as option: DEREF never # Never follow aliases LINE_MAX 2000 . . (OPTIONS) : URI URI() () LDAP LDAP . URI ldap, ldaps ldapi, LDAP TCP LDAP SSL (TLS) LDAP IPC ( UNIX) . IP . ':' LDAP . (389 ldap:// 636 ldaps://). LDAP IPC name port URL URL- encoded /usr/local/var/ldapi ldapi://%2Fusr%2Flocal%2Fvar%2Fldapi . URI . BASE base DN ldap . base Distinguished Name LDAP . BINDDN bind DN ldap . bind DN Distinguished Name LDAP . . DEREF . : never . . searching . finding . always . HOST () LDAP LDAP . IP ':' ldap . . HOST URI. KEEPALIVE_IDLE keepalive TCP / . . KEEPALIVE_PROBES keepalive TCP / . . KEEPALIVE_INTERVAL keepalive / . . NETWORK_TIMEOUT ( ) poll(2)/select(2) connect(2) . PORT () LDAP . . PORT URI . REFERRALS LDAP . on . ldapsearch(1) . SIZELIMIT ( ) . . (0) SIZELIMIT . . SOCKET_BIND_ADDRESSES IP LDAP . IP . IPv4 / IPv6 . TIMELIMIT ( ) . . (0) TIMELIMIT . . VERSION {2|3} LDAP . TIMEOUT ( ) API LDAP . ldap_result(3) timeout NULL . I am checking the environment for any existing Persian man page translations and style guides for Parch Linux to ensure exact consistency. SASL (SASL OPTIONS) OpenLDAP Simple Authentication and Security Layer . SASL_MECH SASL . SASL_REALM (realm) SASL . SASL_AUTHCID . . SASL_AUTHZID . . SASL_SECPROPS Cyrus SASL . : none ( ) ("noanonymous,noplain") . noplain . noactive . nodict . noanonymous . forwardsec (forward secrecy) . passcred ( ). minssf= . 0 () 1 128 RC4 Blowfish 256 . 0 . maxssf= ( minssf ). INT_MAX . maxbufsize= . 0 . 65536 . SASL_NOCANON DNS SASL . off . SASL_CBINDING (channel-binding) LDAP_OPT_X_SASL_CBINDING . none . GSSAPI (GSSAPI OPTIONS) OpenLDAP Generic Security Services Application Programming Interface . GSSAPI_SIGN GSSAPI (GSS_C_INTEG_FLAG) . off . GSSAPI_ENCRYPT GSSAPI (GSS_C_INTEG_FLAG GSS_C_CONF_FLAG) . off . GSSAPI_ALLOW_REMOTE_PRINCIPAL GSSAPI principal ldapServiceName dnsHostName RootDSE . off . TLS (TLS OPTIONS) OpenLDAP Transport Layer Security . ldaps:// URI ( ) StartTLS LDAP TLS . TLS_CACERT (Certificate Authorities) . TLS_CACERTDIR . . TLS_CACERT TLS_CACERTDIR . TLS_CERT . . TLS_ECNAME () - . OpenSSL . GnuTLS ciphersuite GnuTLS . TLS_KEY TLS_CERT . . . TLS_CIPHER_SUITE . TLS (OpenSSL GnuTLS) . : OpenSSL: TLS_CIPHER_SUITE HIGH:MEDIUM:+SSLv2 GnuTLS: TLS_CIPHER_SUITE SECURE256:!AES-128-CBC OpenSSL : openssl ciphers -v GnuTLS gnutls-cli(1) ( --priority ). GnuTLS gnutls-cli --priority -- -- : gnutls-cli -l TLS_PROTOCOL_MIN [.] SSL/TLS . SSL . TLS 1.x 3.(x+1) : TLS_PROTOCOL_MIN 3.2 TLS 1.1 . OpenLDAP . GnuTLS . TLS_RANDFILE /dev/[u]random . EGD/PRNGD . RANDFILE . GnuTLS . TLS_REQCERT TLS . : never . allow . . try . . demand | hard try . . TLS_REQSAN subjectAlternativeName (SAN) . : never SAN . allow SAN . SAN SAN DN . . try SAN . SAN DN . SAN . SAN SAN . demand | hard . SAN . SAN SAN . SAN . TLS_CRLCHECK (CRL) CA . TLS_CACERTDIR . GnuTLS . : none CRL peer CRL (peer) all CRL TLS_CRLFILE (CRL) . GnuTLS . (ENVIRONMENT VARIABLES) LDAPNOINIT LDAPCONF LDAPRC ldaprc $HOME $CWD LDAP ldap.conf (FILES) ETCDIR/ldap.conf ldap $HOME/ldaprc, $HOME/.ldaprc ldap $CWD/ldaprc ldap (SEE ALSO) ldap(3), ldap_set_option(3), ldap_result(3), openssl(1), sasl(3) (AUTHORS) Kurt Zeilenga, The OpenLDAP Project (ACKNOWLEDGEMENTS) See the file ../Project. OpenLDAP LDVERSION RELEASEDATE LDAP.CONF(5)