LDAP


Configuration Variable	Data Type	Default Value	Description
proxy.config.ldap.auth. enabled	INT	0	Enables (1) or disables (0) LDAP proxy authentication. See LDAP authentication.
proxy.config.ldap.cache. size	INT	5000	Specifies the maximum number of entries allowed in the LDAP cache. If this value is modified, you must update the value of proxy.config.ldap. cache.storage_size proportionally. For example, if you double the cache size, also double the cache storage size.
proxy.config.ldap.cache. storage_size	INT	24582912	Specifies the size of the LDAP cache in bytes. This is directly related to the number of entries in the cache. If this value is modified, you must update the value of proxy.config.ldap.cache.size proportionally. For example, if you double the storage size, also double the cache size. Modifying this variable without modifying proxy.config.ldap. cache.size can cause the LDAP subsystem to stop functioning.
proxy.config.ldap.auth. ttl_value	INT	3000	Specifies the amount of time (in minutes) that entries in the cache remain valid.
proxy.config.ldap.auth. purge_cache_on_auth_fail	INT	1	When enabled (1), configures Content Gateway to delete the authorization entry for the client in the LDAP cache if authorization fails.
proxy.config.ldap.proc. ldap.server.name	STRING	NULL	Specifies the LDAP server name.
proxy.config.ldap.proc. ldap.server.port	INT	389	Specifies the LDAP server port.
proxy.config.ldap.proc. ldap.base.dn	STRING	NULL	Specifies the LDAP Base Distinguished Name (DN). Obtain this value from your LDAP administrator.
proxy.config.ldap.proc. ldap.uid_filter	STRING	sAMAccountName	Specifies the LDAP login name/ID. Use this as a filter to search the full DN database. For eDirectory or other directory services, enter uid in this field.
proxy.config.ldap. secure.bind.enabled	INT	0	When enabled (1), configures the proxy to use secure LDAP (LDAPS) to communicate with the LDAP server. Secure communication is usually performed on port 636 or 3269.
proxy.config.ldap.proc. ldap.server.bind_dn	STRING	NULL	Specifies the Full Distinguished Name (fully qualified name) of a user in the LDAP-based directory service. For example: CN=John Smith,CN=USERS, DC=MYCOMPANY,DC=COM Enter a maximum of 128 characters in this field. If no value is specified for this field, the proxy attempts to bind anonymously.
proxy.config.ldap.proc. ldap.server.bind_pwd	STRING	NULL	Specifies a password for the user identified by the proxy.config.ldap. proc.ldap.server.bind_dn variable.
proxy.config.ldap.proc. encode_convert	INT	0	Enables (1) or disables (0) the support of passwords with special characters. The variable proxy.config.ldap. proc.encode_name is required when this variable is enabled. This variable must be added manually. See this page for additional information.
proxy.config.ldap.proc. encode_name	STRING	NULL	Specifies the encoding name to be used when proxy.config.ldap. proc.encode_convert is enabled. This variable must be added manually.