YPLDAP.CONF(5)

📦 version 15.1, in freebsd 14.5, freebsd 15.1

okay bestie, welcome to YPLDAP.CONF(5), the File Formats Manual page for ypldap.conf — the LDAP YP map daemon config file. This is the whole vibe, no skips, periodt 💖

🎀 NAME 🎀

ypldap.conf — LDAP YP map daemon configuration file.

✨ DESCRIPTION ✨

The ypldap(8) daemon provides YP maps using LDAP as a backend. That’s the whole plot 🫶.

🌸 SECTIONS 🌸

The ypldap.conf config file is divided into three main sections.

🧚 Macros

User-defined variables may be defined and used later, simplifying the configuration file.

👑 Global Configuration

Global settings for ypldap(8).

🍓 Directories

LDAP Directory specific parameters.

💅 MACROS 💅

Much like cpp(1) or m4(1), macros can be defined that will later be expanded in context. Macro names have rules: they must start with a letter, digit, or underscore, and may contain letters, digits, and underscores. Macro names may not be reserved words (for example, domain). Macros are not expanded inside quotes.

no cap bestie: macros are not expanded inside quotes — that part is a vibe check you need to pass 🙈

For example:

fixed_gecos="Pulled from LDAP"

fixed attribute gecos $fixed_gecos

🦋 GLOBAL CONFIGURATION 🦋

Global settings concern the main behaviour of the daemon. Here’s the lineup, iconically:

  • domain string — Sets the name of the NIS domain that ypldap.conf will provide.
  • interval seconds — Sets the interval in seconds at which the whole directory will be pulled from LDAP.
  • provide map string — Picks a map that should be provided by ypldap.conf. The currently implemented maps are: passwd.byname, passwd.byuid, group.byname, group.bygid.

🍓 DIRECTORIES 🍓

Directories are used to describe the LDAP schema and help ypldap.conf convert LDAP entries to passwd(5), master.passwd(5), and group(5) lines. A directory declaration is of the following form:

directory "some.host" {
        # directives
}

Valid directives for directories are:

  • attribute name maps to string — Maps the passwd(5), master.passwd(5), or group(5) attribute to the LDAP attribute name supplied.
  • basedn string — Uses the supplied search base as the starting point for the directory search.
  • groupdn string — Uses the supplied search base as the starting point for the directory search for groups. If not supplied, the basedn value will be used.
  • bindcred string — Uses the supplied credentials for simple authentication against the directory.
  • binddn string — Uses the supplied Distinguished Name to bind to the directory.
  • fixed attribute attribute string — Do not retrieve the specified attribute from LDAP; instead, set it unconditionally to the supplied value for every entry.
  • group filter string — Uses the supplied LDAP filter to retrieve group entries.
  • list name maps to string — Maps the passwd(5), master.passwd(5), or group(5) attribute to the LDAP attribute name supplied. A list creates a comma separated list of all the LDAP attributes found.

Valid attributes are:

  • name
  • passwd
  • uid
  • gid
  • gecos
  • home
  • shell
  • change
  • expire
  • class
  • groupname
  • grouppasswd
  • groupgid
  • groupmembers
  • passwd filter string — Uses the supplied LDAP filter to retrieve password entries.

👑 FILES 👑

  • /etc/ypldap.conf — ypldap(8) configuration file.
  • /usr/share/examples/ypldap/ypldap.conf — ypldap(8) configuration file example.

🔥 SEE ALSO 🔥

🌈 HISTORY 🌈

The ypldap.conf file format first appeared in OpenBSD 4.4.

💖 mwah, that’s the tea — this page is from Debian, dated March 22, 2020 💖

📦 where this page comes from