Create ldapresolver via pi-manage

Hi,
I’m trying to install & config a complete privacyidea-server via ansible.
Installation is working like a charm, but when it comes to configuration, I’m running into a problem:
I want to create a new LDAPresolver via the pi-manage-script, but there’s no hint in the docs, how the file with the params should look like. I tried some variants, but I failed.
Please help!

regards

Welcome to the privacyIDEA community.

It is a python dictionary (or json file) which looks like this:

{'LDAPURI': '$LDAPSERVER',
'LDAPBASE': '$LDAPBASE',
'BINDDN': '$BINDDN',
'BINDPW': '$BINDPW',
'LOGINNAMEATTRIBUTE': 'uid',
'LDAPSEARCHFILTER': '(uid=*)(objectClass=organizationalPerson)',
'LDAPFILTER': '(&(uid=%s)(objectClass=organizationalPerson))',
'USERINFO': '{"username": "uid", \
              "phone": "telephoneNumber", \
              "mobile": "mobile", \
              "email": "mail", \
              "surname": "sn", \
              "givenname": "givenName"}',
'UIDTYPE': 'DN',
'AUTHTYPE': 'Simple',
'NOREFERRALS': True,
'TIMEOUT': 5,
'SIZELIMIT': 500
}

Adapt to your needs.

Thanks, works like a charm!! :smile:

1 Like