From 73a8d9e373cd0f8540c77d20b3a01d61b646f521 Mon Sep 17 00:00:00 2001
From: Badlop
ejabberd has built-in LDAP support. You can authenticate users against LDAP server and use LDAP directory as vCard storage. Shared rosters are not supported -yet.
+yet.Note that ejabberd treats LDAP as a read-only storage: +it is possible to consult data, but not possible to +create accounts, change password or edit vCard that is stored in LDAP.
Parameters:
ejabberd can map LDAP attributes to vCard fields. This behaviour is implemented in the mod_vcard_ldap module. This module does not depend on the -authentication method (see 3.2.5).
The mod_vcard_ldap module has +authentication method (see 3.2.5).
Note that ejabberd treats LDAP as a read-only storage: +it is possible to consult data, but not possible to +create accounts, change password or edit vCard that is stored in LDAP.
The mod_vcard_ldap module has its own optional parameters. The first group of parameters has the same meaning as the top-level LDAP parameters to set the authentication method: ldap_servers, ldap_port, ldap_rootdn, diff --git a/doc/guide.tex b/doc/guide.tex index e4bf8e777..afee33766 100644 --- a/doc/guide.tex +++ b/doc/guide.tex @@ -1911,6 +1911,11 @@ module loaded! server and use LDAP directory as vCard storage. Shared rosters are not supported yet. +Note that \ejabberd{} treats LDAP as a read-only storage: +it is possible to consult data, but not possible to +create accounts, change password or edit vCard that is stored in LDAP. + + \makesubsubsection{ldapconnection}{Connection} Parameters: @@ -3438,6 +3443,10 @@ Examples: implemented in the \modvcardldap{} module. This module does not depend on the authentication method (see~\ref{ldapauth}). +Note that \ejabberd{} treats LDAP as a read-only storage: +it is possible to consult data, but not possible to +create accounts, change password or edit vCard that is stored in LDAP. + The \modvcardldap{} module has its own optional parameters. The first group of parameters has the same meaning as the top-level LDAP parameters to set the authentication method: