75 lines
2.3 KiB
Plaintext
75 lines
2.3 KiB
Plaintext
# This file needs to be accessible by the Sieve interpreter running in LDA/LMTP.
|
|
# This requires acces by the mail user. Don't use privileged LDAP credentials
|
|
# here as these may likely leak. Only search and read access is required.
|
|
|
|
# Space separated list of LDAP hosts to use. host:port is allowed too.
|
|
hosts = localhost
|
|
|
|
# LDAP URIs to use. You can use this instead of hosts list. Note that this
|
|
# setting isn't supported by all LDAP libraries.
|
|
#uris =
|
|
|
|
# Distinguished Name - the username used to login to the LDAP server.
|
|
# Leave it commented out to bind anonymously.
|
|
#dn =
|
|
|
|
# Password for LDAP server, if dn is specified.
|
|
#dnpass =
|
|
|
|
# Use SASL binding instead of the simple binding. Note that this changes
|
|
# ldap_version automatically to be 3 if it's lower.
|
|
#sasl_bind = no
|
|
# SASL mechanism name to use.
|
|
#sasl_mech =
|
|
# SASL realm to use.
|
|
#sasl_realm =
|
|
# SASL authorization ID, ie. the dnpass is for this "master user", but the
|
|
# dn is still the logged in user. Normally you want to keep this empty.
|
|
#sasl_authz_id =
|
|
|
|
# Use TLS to connect to the LDAP server.
|
|
#tls = no
|
|
# TLS options, currently supported only with OpenLDAP:
|
|
#tls_ca_cert_file =
|
|
#tls_ca_cert_dir =
|
|
#tls_cipher_suite =
|
|
# TLS cert/key is used only if LDAP server requires a client certificate.
|
|
#tls_cert_file =
|
|
#tls_key_file =
|
|
# Valid values: never, hard, demand, allow, try
|
|
#tls_require_cert =
|
|
|
|
# Use the given ldaprc path.
|
|
#ldaprc_path =
|
|
|
|
# LDAP library debug level as specified by LDAP_DEBUG_* in ldap_log.h.
|
|
# -1 = everything. You may need to recompile OpenLDAP with debugging enabled
|
|
# to get enough output.
|
|
#debug_level = 0
|
|
|
|
# LDAP protocol version to use. Likely 2 or 3.
|
|
#ldap_version = 3
|
|
|
|
# LDAP base. %variables can be used here.
|
|
# For example: dc=mail, dc=example, dc=org
|
|
base =
|
|
|
|
# Dereference: never, searching, finding, always
|
|
#deref = never
|
|
|
|
# Search scope: base, onelevel, subtree
|
|
#scope = subtree
|
|
|
|
# Filter for user lookup. Some variables can be used:
|
|
# %u - username
|
|
# %n - user part in user@domain, same as %u if there's no domain
|
|
# %d - domain part in user@domain, empty if there's no domain
|
|
# %{name} - name of the Sieve script
|
|
#sieve_ldap_filter = (&(objectClass=posixAccount)(uid=%u))
|
|
|
|
# Attribute containing the Sieve script
|
|
#sieve_ldap_script_attr = mailSieveRuleSource
|
|
|
|
# Attribute used for modification tracking
|
|
#sieve_ldap_mod_attr = modifyTimestamp
|