45 lines
1.6 KiB
Plaintext
45 lines
1.6 KiB
Plaintext
|
if PACKAGE_libopenldap
|
||
|
config OPENLDAP_DEBUG
|
||
|
bool "Enable debugging information"
|
||
|
default y
|
||
|
help
|
||
|
Enable debugging information. This option must be enabled
|
||
|
for the loglevel directive to work.
|
||
|
config OPENLDAP_CRYPT
|
||
|
bool "Crypt(3) passwords support"
|
||
|
default n
|
||
|
help
|
||
|
With crypt(3) password storage scheme enabled, OpenLDAP can
|
||
|
receive and store SHA-256 and SHA-512 password hashes from
|
||
|
Samba AD-DC. If this option is disabled, synchronization of
|
||
|
passwords between Samba AD-DC (v4.5 and above) and OpenLDAP
|
||
|
requires use of cleartext passwords.
|
||
|
To enable crypt(3) password synchronization functionality:
|
||
|
1. Re-include crypt(3) support in OpenWRT by enabling 'Include
|
||
|
crypt() support for SHA256, SHA512 and Blowfish ciphers' option
|
||
|
in "Advanced configuration options (for developers)" ->
|
||
|
"Toolchain Options".
|
||
|
2. Provision AD-DC with 'password hash userPassword schemes'
|
||
|
option. For more information, see smb.conf manpage for details
|
||
|
on 'password hash userPassword schemes'.
|
||
|
3. Use a script to synchronize passwords from AD-DC to
|
||
|
OpenLDAP. See samba-tool manpage for 'user syncpasswords'.
|
||
|
config OPENLDAP_MONITOR
|
||
|
bool "Enable monitor backend"
|
||
|
default n
|
||
|
help
|
||
|
Enable monitor backend to obtain information about the running
|
||
|
status of the daemon. See OpenLDAP documentation for more
|
||
|
information.
|
||
|
config OPENLDAP_DB47
|
||
|
bool "Berkeley DB support"
|
||
|
default n
|
||
|
help
|
||
|
Enable Berkeley DB support (BDB).
|
||
|
config OPENLDAP_ICU
|
||
|
bool "ICU support"
|
||
|
default n
|
||
|
help
|
||
|
Enable ICU (International Components for Unicode) support.
|
||
|
endif
|