Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 3 additions & 2 deletions pages/docs/configuration/authentication/ldap.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -11,12 +11,13 @@ You can use a Lightweight Directory Access Protocol (LDAP) authentication server

**Basic Configuration**

- `LDAP_URL` and `LDAP_USER_SEARCH_BASE` are required.
- `LDAP_URL` and `LDAP_USER_SEARCH_BASE` are required. `LDAP_URL` supports a comma-separated list for multiple servers.
- Multiple URLs are tried in order on connection failures; authentication or search failures do not fall back.
- `LDAP_SEARCH_FILTER` is optional; if not specified, the `mail` attribute is used by default. If specified, use the literal `{{username}}` to use the given username for the search.

<OptionTable
options={[
['LDAP_URL', 'string', 'LDAP server URL.', 'LDAP_URL=ldap://localhost:389'],
['LDAP_URL', 'string', 'LDAP server URL (comma-separated list supported).', 'LDAP_URL=ldap://localhost:389,ldap://localhost:3891'],
['LDAP_BIND_DN', 'string', 'Bind DN', 'LDAP_BIND_DN=cn=root'],
['LDAP_BIND_CREDENTIALS', 'string', 'Password for bindDN', 'LDAP_BIND_CREDENTIALS=password'],
[
Expand Down
4 changes: 2 additions & 2 deletions pages/docs/configuration/dotenv.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -1243,7 +1243,7 @@ For more information: **[LDAP/AD Authentication](/docs/configuration/authenticat

<OptionTable
options={[
['LDAP_URL', 'string', 'LDAP server URL.', 'LDAP_URL=ldap://localhost:389'],
['LDAP_URL', 'string', 'LDAP server URL (comma-separated list supported).', 'LDAP_URL=ldap://localhost:389,ldap://localhost:3891'],
['LDAP_BIND_DN', 'string', 'Bind DN', 'LDAP_BIND_DN=cn=root'],
['LDAP_BIND_CREDENTIALS', 'string', 'Password for bindDN', 'LDAP_BIND_CREDENTIALS=password'],
[
Expand Down Expand Up @@ -1483,4 +1483,4 @@ Notes:
- Leader election requires Redis to be enabled (`USE_REDIS=true`).
- These settings are only relevant for multi-instance deployments.
- The leader lease must be renewed before expiration to maintain leadership.
- If lease renewal fails after max attempts, the instance will relinquish leadership.
- If lease renewal fails after max attempts, the instance will relinquish leadership.