---
name: "afp_ldap.conf"
section: "5"
platform: "linux"
package: "netatalk"
version: "2.2.5-2+deb9u1"
release: "Debian 9 (Stretch)"
platforms: ["linux"]
url: "https://new.carta.tech/afp_ldap.conf"
---

# afp\_ldap.conf(5)

Configuration file used by afpd(8) to configure a LDAP connection to an LDAP server. That is needed for ACL support in order to be able to query LDAP for UUIDs.

## NAME

afp\_ldap.conf - Configuration file used by [afpd(8)](/afpd/8.md) to configure a LDAP connection to an LDAP server. That is needed for ACL support in order to be able to query LDAP for UUIDs.

## DESCRIPTION

/etc/netatalk/afp\_ldap.conf is the configuration file used by **afpd** to set up an LDAP connection to an LDAP server.

Any line not prefixed with # is interpreted.

**Note**\

You can use [**afpldaptest**(1)](/afpldaptest/1.md) to syntactically check your config

The required parameters and their meanings are:

## PARAMETER

ldap\_server

Name or IP address of your LDAP Server

ldap\_auth\_method

Authentication method: **none \| simple \| sasl**

none

anonymous LDAP bind

simple

simple LDAP bind

sasl

SASL. Not yet supported !

ldap\_auth\_dn

Distinguished Name of the user for simple bind.

ldap\_auth\_pw

Distinguished Name of the user for simple bind.

ldap\_userbase

DN of the user container in LDAP.

ldap\_userscope

Search scope for user search: **base \| one \| sub**

ldap\_groupbase

DN of the group container in LDAP.

ldap\_groupscope

Search scope for user search: **base \| one \| sub**

ldap\_uuuid\_attr

Name of the LDAP attribute with the UUIDs.

Note: this is used both for users and groups.

ldap\_name\_attr

Name of the LDAP attribute with the users short name.

ldap\_group\_attr

Name of the LDAP attribute with the groups short name.

## EXAMPLES

**Example. afp\_ldap.conf setup with simple bind**

```
ldap_server      = localhost
ldap_auth_method = simple
ldap_auth_dn     = cn=admin,dc=domain,dc=org
ldap_auth_pw     = notthisone
ldap_userbase    = ou=users,dc=domain,dc=org
ldap_userscope   = one
ldap_groupbase   = ou=groups,dc=domain,dc=org
ldap_groupscope  = one
ldap_uuid_attr   = some_attribute
ldap_name_attr   = cn
ldap_group_attr  = cn
```

## SEE ALSO

[**afpd**(8)](/afpd/8.md), [**AppleVolumes.default**(5)](/AppleVolumes.default/5.md), [**afpldaptest**(1)](/afpldaptest/1.md)