LDAP filters for FreeIPA

---

TIPS for LDAP connection with freeIPA

---

As I spent a few hours trying to get this right, here is set up for connecting ProjeQtOr to LDAP in FreeIPA.

First, the good news is you don't have to do that at install. You can do this later on. So make you a favor, run the install first and activate the LDAP connection when Projeqtor is working.

Once installed, go to Administration->Parameters->Global parameters->Authentication.

connection with LDAP user: change to "Yes"
LDAP base dn: cn=users,cn=accounts,dc=mywebsite,dc=com
LDAP host: yourFreeIPA
LDAP port: 389 (assuming you did not change it)
LDAP version : 3
LDAP user: uid=myconnecting_user,cn=users,cn=accounts,dc=mywebsite,dc=com
LDAP password: my connecting_user_password
LDAP user filter: (&(objectclass=*)(uid=%username%))

I did not try with only LDAP user filter: uid=%username%
but that is probably working too.
The trick is to retrict the LDAP base to the user subtree.

Of course, something else to know is that users will get created at first log in of each user. Also, as you test, close the bowser / clear cookies to make sure you get a new session.

Hope this helps.