View source for LDAP Users and Groups

The module '''LDAP Users and Groups''' facilitates the use of an [[LDAP Server]] to store Unix [[Users and Groups]]. 

* [[Introduction to LDAP]]
* [[LDAP Server]] 
* [[LDAP Client]] 

== Configuration ==
The most complex part of using this module is configuring it to talk to your [[LDAP server]]. By default, it will attempt to auto-detect the settings by looking at the LDAP client settings on your system, documented on the [[LDAP Client]] page. The LDAP Users and Groups page is located under Unused Modules as long as the LDAP Client is not detected.

If autodetection fails (perhaps because the LDAP server is not one of its own clients), you will need to configure the module manually as follows:
# On the module's main page, click on the '''Module Config''' link.
# In the '''LDAP server host''' field, enter the hostname of your LDAP server. If it is running on the same machine, enter <tt>localhost</tt>.
# If the LDAP server is using encryption, change the '''LDAP server uses TLS?''' option to '''Yes'''.
# In the '''Bind to LDAP server as''' field, enter the full DN of the administrative user for your LDAP server. This might be something like <tt>cn=Manager,dc=my-domain,dc=com</tt>.
# In the '''Credentials for bind name above''' field, enter the password for the above administrative DN.
# In the '''Base for users''' field, enter the DN under which all users can be found and which new users should be created. This is typically something like <tt>dc=Users,dc=my-domain,dc=com</tt> .
# Similarly, in the '''Base for groups''' field, enter the DN under which groups are found and which new groups should be created. This is typically something like <tt>dc=Groups,dc=my-domain,dc=com</tt> .
# Click the '''Save''' button.

Assuming that all your settings are correct, the module should now display a list of existing users and groups, with links to add new ones. From here on, it can be used exactly like the [[Users and Groups]] module.

[[Image:LDAP Users and Groups Configuration Server Options.png|frame|none|Module Server Configuration Options]]

== LDAP Users and Groups module ==
This module is essentially the same as the [[Users and Groups]] module. However, instead of modifying your systems <tt>/etc/passwd</tt> and <tt>/etc/group</tt> files, it talks to an [[LDAP Server]] (such as OpenLDAP) and modifies users in the server's database. At the moment, it assumes that you already have an LDAP server setup with base DN's created for your users and groups.

[[Image:LDAP Users and Groups.png|frame|none|LDAP Users and Groups - Main screen]]

[[Image:LDAP - Users and Groups.png|frame|none|LDAP Users and Groups - Main screen with users added]]


=== Create User===
[[Image:LDAP Users and Groups Create User.png|frame|none|LDAP Users and Groups - Create User]]

=== Batch add===
This form allows you to create, modify or delete many users at once from an uploaded or local text file. Each line in the file specifies one action to take, depending on its first field. The line formats are:

 create:username:passwd:uid:gid:realname:homedir:shell:min:max:warn:inactive:expire
 modify:oldusername:username:passwd:uid:gid:realname:homedir:shell:min:max:warn:inactive:expire
 delete:username

In create lines, if the uid field is left empty, Webmin will assign a UID automatically. If the gid field is empty, Webmin will create a new group with the same name as the user. The username, homedir and shell fields must be supplied for every user - all other fields are allowed to be empty. If the passwd field is blank, no password will be assigned for the user. If it contains just the letter x, the account will be locked. Otherwise, the text in the field will be taken as the cleartext password and encrypted.
In modify lines, an empty field will be taken to mean that the corresponding user attribute is not to be modified.


[[Introduction to LDAP ]]

[[Category:LDAP]]