LDAP-E-Mail-Verschlüsselungsplugin
The email action lets you send encrypted emails via the S/MIME protocol. This requires a certificate of the recipient that contains the encryption key. This plugin lets you read that certificate from an Ldap server. It looks for an entry (person) in the Ldap directory based on the email of the recipient. If an entry is found, the certificate is read from a freely configurable attribute of that entry.
Once this plugin is installed, you need to configure an Ldap server and also specify the attributes that contain the email and certificate.
When necessary, you can also configure multiple Ldap servers. To do so, you need to add additional configuration parameters with an appropriate index, such as connection.data.2.base.dn or connection.data.3.base.dn.
Configuration
The following configuration parameters are available:
- connection.data.<INDEX>.host (required)
- The host name of the Ldap server, without the port and protocol.
- Beispiel: directory.bayern.de
- connection.data.<INDEX>.port (required)
- The port of the Ldap server.
- Beispiel: 389
- connection.data.<INDEX>.base.dn (required)
- The base domain for the Ldap search.
- Beispiel: ou=pki-teilnehmer,dc=pki,dc=bayern,dc=de
- connection.data.<INDEX>.attribute.email (required)
- The attribute of an entry in the active directory that contains the email address.
- Beispiel: mail
- connection.data.<INDEX>.attribute.certificate (required)
- The attribute of an entry in the active directory that contains the certificate. It must be an X-509 certificate.
- Beispiel: userCertificate
- connection.data.<INDEX>.auth.name
- The username for establishing a connection to the Ldap server. Leave empty if no authentication is required.
- connection.data.<INDEX>.auth.password
- The password for establishing a connection to the Ldap server. Leave empty if no authentication is required.
- connection.data.<INDEX>.referral.hop.count (required)
- Maximum number of referrals that are followed.
- connection.data.<INDEX>.use.ssl
- Either true or false. Whether the connection to the Ldap server is encrypted and uses Ssl or rather Tls.