NTLM authentication properties
The file ldapauth.properties stores several settings related to NTLM authorisation.
You should edit these settings via the user interface. Please note that some of these properties are stored encrypted.
Property | Default value | Encrypted | Explanation |
---|---|---|---|
use.ntlm | false | no | Whether NTLM authentication is activated. |
ntlm.fs.sync | false | no | When activated, all changes to the configuration will be sent to all available frontend servers. |
ntlm.domain | (empty string) | yes | The Windows domain name. The format depends on the active directory, eg. example.de oder example0. |
ntlm.domain.controller | (empty string) | yes | The (IP) address of the active directory controller used for authenticating users via NTLM and retrieving their data. |
ntlm.domain.controller.host | (empty string) | yes | The host name of the active directory controller. |
ntlm.account | (empty string) | yes | Name of the computer account that must have been granted permission to perform user verification. It must not be a regular user account. |
ntlm.account.pwd | (empty string) | yes | Password for the computer account. |
ldap.search.account | (empty string) | yes | The LDAP account used to access the active directory in order to search for available users. |
ldap.search.account.pwd | (empty string) | yes | Password for the LDAP account used to access the active directory in order to search for available users. |
ldap.search.ssl | false | no | Whether SSL is used for the connection to the LDAP server. |
ldap.search.port | 389 | yes | The port for the connection to the LDAP server. |
ldap.search.hop.count | 5 | no | The maximum number of referral hops that may be performed on the LDAP server. Setting this to 0 deactivates referral hops and no references will be followed. |
ldap.search.basedn | (empty string) | yes | The LDAP base DN (distinguished name) used for looking up available user accounts. |