if PACKAGE_libopenldap config OPENLDAP_DEBUG bool "Enable debugging information" default y help Enable debugging information. This option must be enabled for the loglevel directive to work. config OPENLDAP_CRYPT bool "Crypt(3) passwords support" default n help With crypt(3) password storage scheme enabled, OpenLDAP can receive and store SHA-256 and SHA-512 password hashes from Samba AD-DC. If this option is disabled, synchronization of passwords between Samba AD-DC (v4.5 and above) and OpenLDAP requires use of cleartext passwords. To enable crypt(3) password synchronization functionality: 1. Re-include crypt(3) support in OpenWRT by enabling 'Include crypt() support for SHA256, SHA512 and Blowfish ciphers' option in "Advanced configuration options (for developers)" -> "Toolchain Options". 2. Provision AD-DC with 'password hash userPassword schemes' option. For more information, see smb.conf manpage for details on 'password hash userPassword schemes'. 3. Use a script to synchronize passwords from AD-DC to OpenLDAP. See samba-tool manpage for 'user syncpasswords'. config OPENLDAP_MONITOR bool "Enable monitor backend" default n help Enable monitor backend to obtain information about the running status of the daemon. See OpenLDAP documentation for more information. config OPENLDAP_DB47 bool "Berkeley DB support" default n help Enable Berkeley DB support (BDB). config OPENLDAP_ICU bool "ICU support" default n help Enable ICU (International Components for Unicode) support. endif