Difference between revisions of "LDAP"

m
m (updated link)
Line 20: Line 20:
 
==Authenticating with LDAP==
 
==Authenticating with LDAP==
  
Here are settings for authenticating different types of users. Ideally, you can authenticate more than one type, but that will depend what kind of support your software has. Of course, if you are a true [[Students with Computer Skills|badass]], you shouldn't be afraid to write your own extension to handle multiple LDAP settings. In all cases, you need to somehow substitute $USER with the name of the user that's logging in.
+
Here are settings for authenticating different types of users. Ideally, you can authenticate more than one type, but that will depend what kind of support your software has. Of course, if you are a true [[students with computer skills|badass]], you shouldn't be afraid to write your own extension to handle multiple LDAP settings. In all cases, you need to somehow substitute $USER with the name of the user that's logging in.
  
 
===Williams Students===
 
===Williams Students===

Revision as of 20:14, May 5, 2006


LDAP is a protocol for searching for email addresses and checking the passwords of people with a Unix ID. The College runs three LDAP servers:

  • nds1.williams.edu is the Novell NetWare server that has a lot of information about you, and that can check your password;
  • nds2.williams.edu is nds1's twin;
  • ldap.williams.edu is used solely for searching email addresses.

Auto-completing email addresses

Many email clients let you configure an LDAP server to act as your address book. Here are the settings you'll need:

Server: ldap.williams.edu

Search Base: ou=People,o=williams

Port: 389

Use SSL: No

Authenticating with LDAP

Here are settings for authenticating different types of users. Ideally, you can authenticate more than one type, but that will depend what kind of support your software has. Of course, if you are a true badass, you shouldn't be afraid to write your own extension to handle multiple LDAP settings. In all cases, you need to somehow substitute $USER with the name of the user that's logging in.

Williams Students

Server: nds2.williams.edu (or nds1.williams.edu)
Bind domain: cn=$USER,ou=student,o=williams
SSL: no

WSO accounts

These include some students and some alumni.

Server: ursula
Bind domain: uid=$USER,cn=users,dc=williams,dc=edu
SSL: yes

Williams Faculty

Server: nds2.williams.edu
Bind domain: cn=$USER,ou=faculty,o=williams
SSL: no

Williams Staff

Server: nds2.williams.edu
Bind domain: cn=$USER,ou=staff,o=williams
SSL: no

Fun with LDAP

If you want to query an LDAP server directly, there's a program called "ldapsearch" available for Mac OS X and Linux that you can use to query these servers.