Config and Sync LDAP Users
Ldap 配置属于一个组织,该组织的用户将被同步。
您应该使用全局管理员用户来修改配置。 您需要在“组织”页面中输入LDAP用户同步的以下信息。
Config to connect LDAP server
Server Name
A friendly name is used by managers to identify different servers.
例如:
LDAP 服务器示例
Server Host
LDAP server's host or IP address
例如:
example.com
Server Port
LDAP server's ports, only allow numbers.
例如:
389
Base DN
Casdoor uses Sub search mode by default when searching in LDAP. Base DN is the basic distinguished name of the search. Casdoor will return all users under the current base DN.
The admin account configured in casdoor should have at least read-only permissions at base DN.
例如:
ou=Example,dc=example,dc=com
Admin
An account that can log in to the specified LDAP server.
Login with DN or ID depends on the LDAP server settings you want to connect.
例如:
cn=manager,dc=example,dc=com
Admin Password
Password of LDAP server Admin account.
Auto Sync
Set 0
to disable auto sync, other value means Sync every few minutes.
Sync users
The sync table displays all users get from the LDAP server in the specific ou
. If the users have been synced, the checkbox will be disabled. You can check the box to select users, then sync the selected users from the LDAP server.
If the uid
of the user in LDAP server is same as the name
of a user existed in the organization of Casdoor, Casdoor will create a new user that the name
include the uid
and a random string. But the user may can not to login, because the name of the new synced user not exist in LDAP server. So try to avoid that.