Merge pull request #233 from felixvarghese/master

documentation for LDAP connection using StartTLS
This commit is contained in:
Nabin Hait
2018-07-06 12:34:29 +05:30
committed by GitHub

View File

@@ -18,3 +18,9 @@ To enable ldap service, you need to configure parameters like LDAP Server Url, O
After setting up LDAP parameters, on login screen, the system enables **Login Via LDAP** option.
<img class="screenshot" alt="LOGIN via LDAP" src="{{docs_base_url}}/assets/img/setup/integrations/login_via_ldap.png">
#### Connecting to LDAP Securely
In the LDAP Settings area, there are two dropdowns.
1. SSL/TLS Mode - set this to **StartTLS** to connect to your LDAP server using StartTLS. If your LDAP server does not support StartTLS, setting this to StartTLS will result in an error `StartTLS is not supported`. Check the configuration on your LDAP server if you receive this error.
2. Require Trusted Certificate - if you change this to **Yes** then the certificate provided by the LDAP server must be trusted by the Frappe/ERPNext server. If you would rather use StartTLS with a self-signed (untrusted) certificate, set this to **No**. If you do not use StartTLS, this setting is ignored.