# LDAP (LDAP Servers)
# once a user is authenticated, LDAP will query the user and pull a list
# of groups that the user belongs to
# These groups will be created in the CMS on the fly and the CMS user will
# be associated with them.
auth.pipeline.pre=com.dotcms.enterprise.LDAPProxy
auth.impl.ldap.initial.context.factory=com.sun.jndi.ldap.LdapCtxFactory

# Set SSL if you are using LDAPS  or leave blank
auth.impl.ldap.security.authentication=

# set path to keystore with root server cert imported or leave blank
auth.impl.ldap.security.keystore.path=
auth.impl.ldap.host=54.165.56.4
auth.impl.ldap.port=389

# should be full dn of user
auth.impl.ldap.userid=dotCMS LDAP Query,CN=Users,DC=training,DC=dotcms,DC=com
auth.impl.ldap.password=mdWccN9FeFr4kUg3
auth.impl.ldap.domainlookup=OU=dotCMS Users,DC=training,DC=dotcms,DC=com
auth.impl.build.groups=true

#auth.impl.ldap.build.group.name.filter=^dotCMS_(.*)
auth.impl.ldap.build.group.name.filter=^(WCM_.*)

# Prefix the dotcms should strip from group name.  Leave blank to not strip any prefix.
#auth.impl.ldap.build.group.name.filter.strip=dotCMS_

#If you set to false any user created from LDAP will not be able to log into the dotCMS if LDAP is not available.
auth.impl.ldap.syncPassword=false

# The following attributes can be used to match up dotCMS user properties to LDAP Attributes.  Uncomment all attributes.
# If you leave the attribute blank then it will not be synced from LDAP.
# NOTE:  YOU CANNOT HAVE A GROUP NAME WITH A "=" IN IT
#auth.impl.ldap.attrib.user=samAccountName

auth.impl.ldap.attrib.user=mail
auth.impl.ldap.attrib.firstName=givenName
auth.impl.ldap.attrib.middleName=middleName
auth.impl.ldap.attrib.lastName=sn
auth.impl.ldap.attrib.nickName=
auth.impl.ldap.attrib.email=mail
auth.impl.ldap.attrib.gender=
auth.impl.ldap.attrib.group=memberOf