aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorThomas Fitzsimmons2015-04-17 22:02:03 -0400
committerThomas Fitzsimmons2015-04-17 22:02:03 -0400
commitc05d1f047b3fd14df2169e41abc7c554704c2804 (patch)
tree356c0aae4f15ca4f320d96c77cf370e6eb02840f
parent3ec1047b57ccea0f62a2de8095d1bbc07bd43576 (diff)
downloademacs-c05d1f047b3fd14df2169e41abc7c554704c2804.tar.gz
emacs-c05d1f047b3fd14df2169e41abc7c554704c2804.zip
Improve EUDC manual
* eudc.texi (LDAP Configuration): Mention simple and SASL authentication schemes. Add index items. Shorten example server name.
-rw-r--r--doc/misc/eudc.texi47
1 files changed, 40 insertions, 7 deletions
diff --git a/doc/misc/eudc.texi b/doc/misc/eudc.texi
index 7ab444c0157..4d6e6addc35 100644
--- a/doc/misc/eudc.texi
+++ b/doc/misc/eudc.texi
@@ -226,9 +226,30 @@ Emacs. @file{ldap.el} needs an external program called
226(@url{http://www.openldap.org/}). The configurations in this section 226(@url{http://www.openldap.org/}). The configurations in this section
227were tested with OpenLDAP 2.4.23. 227were tested with OpenLDAP 2.4.23.
228 228
229Most servers use LDAP-over-SSL these days; the examples here reflect
230that. The other possibilities are:
231
232@vindex ldap-host-parameters-alist
233@vindex ldap-ldapsearch-args
234@itemize @bullet
235
236@item
237Servers that do not require authentication or that do not encrypt
238authentication traffic.
239
240Include @code{auth simple} in @code{ldap-host-parameters-alist}, which
241causes the @code{-x} option to be passed to @command{ldapsearch}.
242
243@item
244Servers that require SASL authentication.
245
246Pass any required extra options to @command{ldapsearch} using
247@code{ldap-ldapsearch-args}.
248@end itemize
249
229The following examples use a base of 250The following examples use a base of
230@code{ou=people,dc=example,dc=com} and the host name 251@code{ou=people,dc=example,dc=com} and the host name
231@code{ldaps.gnu.org}, a server that supports LDAP-over-SSL (the 252@code{ldap.gnu.org}, a server that supports LDAP-over-SSL (the
232@code{ldaps} protocol, with default port @code{636}) and which 253@code{ldaps} protocol, with default port @code{636}) and which
233requires authentication by the user @code{emacsuser} with password 254requires authentication by the user @code{emacsuser} with password
234@code{s3cr3t}. 255@code{s3cr3t}.
@@ -272,14 +293,18 @@ TLS_CACERTDIR /etc/openldap/certs
272In @file{.emacs}, these expressions suffice to configure EUDC for 293In @file{.emacs}, these expressions suffice to configure EUDC for
273LDAP: 294LDAP:
274 295
296@vindex message-mode-map
297@findex eudc-expand-inline
298@vindex eudc-server-hotlist
299@vindex ldap-host-parameters-alist
275@lisp 300@lisp
276(eval-after-load "message" 301(eval-after-load "message"
277 '(define-key message-mode-map (kbd "TAB") 'eudc-expand-inline)) 302 '(define-key message-mode-map (kbd "TAB") 'eudc-expand-inline))
278(customize-set-variable 'eudc-server-hotlist 303(customize-set-variable 'eudc-server-hotlist
279 '(("" . bbdb) 304 '(("" . bbdb)
280 ("ldaps://ldaps.gnu.org" . ldap))) 305 ("ldaps://ldap.gnu.org" . ldap)))
281(customize-set-variable 'ldap-host-parameters-alist 306(customize-set-variable 'ldap-host-parameters-alist
282 '(("ldaps://ldaps.gnu.org" 307 '(("ldaps://ldap.gnu.org"
283 base "ou=people,dc=example,dc=com" 308 base "ou=people,dc=example,dc=com"
284 binddn "example\\emacsuser" 309 binddn "example\\emacsuser"
285 passwd ldap-password-read))) 310 passwd ldap-password-read)))
@@ -306,7 +331,7 @@ example, @file{/etc/openldap/ldap.conf} might contain:
306 331
307@example 332@example
308BASE ou=people,dc=example,dc=com 333BASE ou=people,dc=example,dc=com
309URI ldaps://ldaps.gnu.org 334URI ldaps://ldap.gnu.org
310TLS_CACERTDIR /etc/openldap/certs 335TLS_CACERTDIR /etc/openldap/certs
311@end example 336@end example
312 337
@@ -318,20 +343,24 @@ Authentication requires a password, and a @dfn{bind distinguished name
318@file{~/.authinfo.gpg} with the following line: 343@file{~/.authinfo.gpg} with the following line:
319 344
320@example 345@example
321machine ldaps://ldaps.gnu.org binddn example\emacsuser password s3cr3t 346machine ldaps://ldap.gnu.org binddn example\emacsuser password s3cr3t
322@end example 347@end example
323 348
324Then in the @file{.emacs} init file, these expressions suffice to 349Then in the @file{.emacs} init file, these expressions suffice to
325configure EUDC for LDAP: 350configure EUDC for LDAP:
326 351
352@vindex message-mode-map
353@findex eudc-expand-inline
354@vindex eudc-server-hotlist
355@vindex ldap-host-parameters-alist
327@lisp 356@lisp
328(eval-after-load "message" 357(eval-after-load "message"
329 '(define-key message-mode-map (kbd "TAB") 'eudc-expand-inline)) 358 '(define-key message-mode-map (kbd "TAB") 'eudc-expand-inline))
330(customize-set-variable 'eudc-server-hotlist 359(customize-set-variable 'eudc-server-hotlist
331 '(("" . bbdb) 360 '(("" . bbdb)
332 ("ldaps://ldaps.gnu.org" . ldap))) 361 ("ldaps://ldap.gnu.org" . ldap)))
333(customize-set-variable 'ldap-host-parameters-alist 362(customize-set-variable 'ldap-host-parameters-alist
334 '(("ldaps://ldaps.gnu.org" 363 '(("ldaps://ldap.gnu.org"
335 auth-source t))) 364 auth-source t)))
336@end lisp 365@end lisp
337 366
@@ -349,6 +378,10 @@ binddn example\emacsuser password s3cr3t
349@noindent 378@noindent
350and the @file{.emacs} expressions become: 379and the @file{.emacs} expressions become:
351 380
381@vindex message-mode-map
382@findex eudc-expand-inline
383@vindex eudc-server-hotlist
384@vindex ldap-host-parameters-alist
352@lisp 385@lisp
353(eval-after-load "message" 386(eval-after-load "message"
354 '(define-key message-mode-map (kbd "TAB") 'eudc-expand-inline)) 387 '(define-key message-mode-map (kbd "TAB") 'eudc-expand-inline))