Manual Pages  — YPLDAP.CONF

The ypldap(8) daemon provides YP maps using LDAP as a backend.

Much like cpp(1) or m4(1), macros can be defined that will later be expanded in context. Macro names must start with a letter, digit, or underscore, and may contain any of those characters. Macro names may not be reserved words (for example, domain). Macros are not expanded inside quotes.

For example:

fixed_gecos="Pulled from LDAP"

fixed attribute gecos $fixed_gecos

Directories are used to describe the LDAP schema and help ypldap.conf convert LDAP entries to passwd(5), master.passwd(5), and group(5) lines. A directory declaration is of the following form:

directory "some.host" {
        # directives
}

Valid directives for directories are:

attribute name maps to string Map the passwd(5), master.passwd(5), or group(5) attribute to the LDAP attribute name supplied.
basedn string
	Use the supplied search base as starting point for the directory search.
groupdn string
	Use the supplied search base as starting point for the directory search for groups. If not supplied, the basedn value will be used.
bindcred string
	Use the supplied credentials for simple authentication against the directory.
binddn string
	Use the supplied Distinguished Name to bind to the directory.
fixed attribute attribute string
	Do not retrieve the specified attribute from LDAP but instead set it unconditionally to the supplied value for every entry.
group filter string
	Use the supplied LDAP filter to retrieve group entries.
list name maps to string Map the passwd(5), master.passwd(5), or group(5) attribute to the LDAP attribute name supplied. A list creates a comma separated list of all the LDAP attributes found. Valid attributes are:

name passwd uid gid gecos home shell change expire class groupname grouppasswd groupgid groupmembers

passwd filter string
	Use the supplied LDAP filter to retrieve password entries.

ypbind(8), ypldap(8), ypserv(8)