====== LDAP Auth Plugin: Univention Corporate Server ======

Below is an example configuration for use with the [[plugin:authLDAP]] plugin and the [[http://www.univention.de/ucs.html|Univention Corporate Server]].

Use the Config Manager or add it to the ''conf/local.protected.php'' to store the config protected.

<code php conf/local.protected.php>
<?php
/**
 * Univention Corporate Server configuration for LDAP Auth Plugin
 * See https://www.dokuwiki.org/plugin:authldap:ucs for details and explanation
 */
$conf['useacl']      = 1;
$conf['openregister']= 0;
$conf['superuser']   = '@Domain Admins';
$conf['authtype']    = 'authldap';

$conf['plugin']['authldap']['server']      = 'ldap://1.2.3.4:389';
$conf['plugin']['authldap']['starttls']    = 1;
$conf['plugin']['authldap']['usertree']    = 'cn=users, dc=basedn';
$conf['plugin']['authldap']['grouptree']   = 'cn=groups, dc=basedn';
$conf['plugin']['authldap']['userfilter']  = '(&(uid=%{user})(objectClass=posixAccount))';
$conf['plugin']['authldap']['groupfilter'] = '(&(objectClass=posixGroup)(|(gidNumber=%{gid})(uniqueMember=%{dn})))';

$conf['plugin']['authldap']['mapping']['mail'] = 'mailprimaryaddress';
</code>