Struct LdapConfig 

pub struct LdapConfig {
    pub enable: bool,
    pub uri: Option<Url>,
    pub base_dn: String,
    pub bind_dn: Option<String>,
    pub bind_password_file: Option<PathBuf>,
    pub filter: String,
    pub uid_attribute: String,
    pub name_attribute: String,
    pub admin_base_dn: String,
    pub admin_filter: String,
}

Fields

enable: bool

Whether to enable LDAP login.

reloadable: yes example: “true”

uri: Option<Url>

URI of the LDAP server.

reloadable: yes example: “ldap://ldap.example.com:389”

base_dn: String

Root of the searches.

reloadable: yes example: “ou=users,dc=example,dc=org”

default:

bind_dn: Option<String>

Bind DN if anonymous search is not enabled.

You can use the variable {username} that will be replaced by the entered username. In such case, the password used to bind will be the one provided for the login and not the one given by bind_password_file. Beware: automatically granting admin rights will not work if you use this direct bind instead of a LDAP search.

reloadable: yes example: “cn=ldap-reader,dc=example,dc=org” or “cn={username},ou=users,dc=example,dc=org”

default: “”

bind_password_file: Option<PathBuf>

Path to a file on the system that contains the password for the bind_dn.

The server must be able to access the file, and it must not be empty.

reloadable: yes default: “”

filter: String

Search filter to limit user searches.

You can use the variable {username} that will be replaced by the entered username for more complex filters.

reloadable: yes example: “(&(objectClass=person)(memberOf=matrix))”

default: “(objectClass=*)”

uid_attribute: String

Attribute to use to uniquely identify the user.

reloadable: yes example: “uid” or “cn”

default: “uid”

name_attribute: String

Attribute containing the distinguished name of the user.

reloadable: yes example: “givenName” or “sn”

default: “givenName”

admin_base_dn: String

Root of the searches for admin users.

Defaults to base_dn if empty.

reloadable: yes example: “ou=admins,dc=example,dc=org”

default:

admin_filter: String

The LDAP search filter to find administrative users for tuwunel.

If left blank, administrative state must be configured manually for each user.

You can use the variable {username} that will be replaced by the entered username for more complex filters.

reloadable: yes example: “(objectClass=tuwunelAdmin)” or “(uid={username})”

default:

Trait Implementations

impl Clone for LdapConfig

fn clone(&self) -> LdapConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for LdapConfig

fn fmt(&self, __derive_more_f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for LdapConfig

fn default() -> LdapConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for LdapConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for LdapConfig

fn fmt(&self, out: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.