diff options
| author | Thomas Fitzsimmons | 2015-04-17 22:02:03 -0400 |
|---|---|---|
| committer | Thomas Fitzsimmons | 2015-04-17 22:02:03 -0400 |
| commit | c05d1f047b3fd14df2169e41abc7c554704c2804 (patch) | |
| tree | 356c0aae4f15ca4f320d96c77cf370e6eb02840f | |
| parent | 3ec1047b57ccea0f62a2de8095d1bbc07bd43576 (diff) | |
| download | emacs-c05d1f047b3fd14df2169e41abc7c554704c2804.tar.gz emacs-c05d1f047b3fd14df2169e41abc7c554704c2804.zip | |
Improve EUDC manual
* eudc.texi (LDAP Configuration): Mention simple and SASL
authentication schemes. Add index items. Shorten example server
name.
| -rw-r--r-- | doc/misc/eudc.texi | 47 |
1 files changed, 40 insertions, 7 deletions
diff --git a/doc/misc/eudc.texi b/doc/misc/eudc.texi index 7ab444c0157..4d6e6addc35 100644 --- a/doc/misc/eudc.texi +++ b/doc/misc/eudc.texi | |||
| @@ -226,9 +226,30 @@ Emacs. @file{ldap.el} needs an external program called | |||
| 226 | (@url{http://www.openldap.org/}). The configurations in this section | 226 | (@url{http://www.openldap.org/}). The configurations in this section |
| 227 | were tested with OpenLDAP 2.4.23. | 227 | were tested with OpenLDAP 2.4.23. |
| 228 | 228 | ||
| 229 | Most servers use LDAP-over-SSL these days; the examples here reflect | ||
| 230 | that. The other possibilities are: | ||
| 231 | |||
| 232 | @vindex ldap-host-parameters-alist | ||
| 233 | @vindex ldap-ldapsearch-args | ||
| 234 | @itemize @bullet | ||
| 235 | |||
| 236 | @item | ||
| 237 | Servers that do not require authentication or that do not encrypt | ||
| 238 | authentication traffic. | ||
| 239 | |||
| 240 | Include @code{auth simple} in @code{ldap-host-parameters-alist}, which | ||
| 241 | causes the @code{-x} option to be passed to @command{ldapsearch}. | ||
| 242 | |||
| 243 | @item | ||
| 244 | Servers that require SASL authentication. | ||
| 245 | |||
| 246 | Pass any required extra options to @command{ldapsearch} using | ||
| 247 | @code{ldap-ldapsearch-args}. | ||
| 248 | @end itemize | ||
| 249 | |||
| 229 | The following examples use a base of | 250 | The following examples use a base of |
| 230 | @code{ou=people,dc=example,dc=com} and the host name | 251 | @code{ou=people,dc=example,dc=com} and the host name |
| 231 | @code{ldaps.gnu.org}, a server that supports LDAP-over-SSL (the | 252 | @code{ldap.gnu.org}, a server that supports LDAP-over-SSL (the |
| 232 | @code{ldaps} protocol, with default port @code{636}) and which | 253 | @code{ldaps} protocol, with default port @code{636}) and which |
| 233 | requires authentication by the user @code{emacsuser} with password | 254 | requires authentication by the user @code{emacsuser} with password |
| 234 | @code{s3cr3t}. | 255 | @code{s3cr3t}. |
| @@ -272,14 +293,18 @@ TLS_CACERTDIR /etc/openldap/certs | |||
| 272 | In @file{.emacs}, these expressions suffice to configure EUDC for | 293 | In @file{.emacs}, these expressions suffice to configure EUDC for |
| 273 | LDAP: | 294 | LDAP: |
| 274 | 295 | ||
| 296 | @vindex message-mode-map | ||
| 297 | @findex eudc-expand-inline | ||
| 298 | @vindex eudc-server-hotlist | ||
| 299 | @vindex ldap-host-parameters-alist | ||
| 275 | @lisp | 300 | @lisp |
| 276 | (eval-after-load "message" | 301 | (eval-after-load "message" |
| 277 | '(define-key message-mode-map (kbd "TAB") 'eudc-expand-inline)) | 302 | '(define-key message-mode-map (kbd "TAB") 'eudc-expand-inline)) |
| 278 | (customize-set-variable 'eudc-server-hotlist | 303 | (customize-set-variable 'eudc-server-hotlist |
| 279 | '(("" . bbdb) | 304 | '(("" . bbdb) |
| 280 | ("ldaps://ldaps.gnu.org" . ldap))) | 305 | ("ldaps://ldap.gnu.org" . ldap))) |
| 281 | (customize-set-variable 'ldap-host-parameters-alist | 306 | (customize-set-variable 'ldap-host-parameters-alist |
| 282 | '(("ldaps://ldaps.gnu.org" | 307 | '(("ldaps://ldap.gnu.org" |
| 283 | base "ou=people,dc=example,dc=com" | 308 | base "ou=people,dc=example,dc=com" |
| 284 | binddn "example\\emacsuser" | 309 | binddn "example\\emacsuser" |
| 285 | passwd ldap-password-read))) | 310 | passwd ldap-password-read))) |
| @@ -306,7 +331,7 @@ example, @file{/etc/openldap/ldap.conf} might contain: | |||
| 306 | 331 | ||
| 307 | @example | 332 | @example |
| 308 | BASE ou=people,dc=example,dc=com | 333 | BASE ou=people,dc=example,dc=com |
| 309 | URI ldaps://ldaps.gnu.org | 334 | URI ldaps://ldap.gnu.org |
| 310 | TLS_CACERTDIR /etc/openldap/certs | 335 | TLS_CACERTDIR /etc/openldap/certs |
| 311 | @end example | 336 | @end example |
| 312 | 337 | ||
| @@ -318,20 +343,24 @@ Authentication requires a password, and a @dfn{bind distinguished name | |||
| 318 | @file{~/.authinfo.gpg} with the following line: | 343 | @file{~/.authinfo.gpg} with the following line: |
| 319 | 344 | ||
| 320 | @example | 345 | @example |
| 321 | machine ldaps://ldaps.gnu.org binddn example\emacsuser password s3cr3t | 346 | machine ldaps://ldap.gnu.org binddn example\emacsuser password s3cr3t |
| 322 | @end example | 347 | @end example |
| 323 | 348 | ||
| 324 | Then in the @file{.emacs} init file, these expressions suffice to | 349 | Then in the @file{.emacs} init file, these expressions suffice to |
| 325 | configure EUDC for LDAP: | 350 | configure EUDC for LDAP: |
| 326 | 351 | ||
| 352 | @vindex message-mode-map | ||
| 353 | @findex eudc-expand-inline | ||
| 354 | @vindex eudc-server-hotlist | ||
| 355 | @vindex ldap-host-parameters-alist | ||
| 327 | @lisp | 356 | @lisp |
| 328 | (eval-after-load "message" | 357 | (eval-after-load "message" |
| 329 | '(define-key message-mode-map (kbd "TAB") 'eudc-expand-inline)) | 358 | '(define-key message-mode-map (kbd "TAB") 'eudc-expand-inline)) |
| 330 | (customize-set-variable 'eudc-server-hotlist | 359 | (customize-set-variable 'eudc-server-hotlist |
| 331 | '(("" . bbdb) | 360 | '(("" . bbdb) |
| 332 | ("ldaps://ldaps.gnu.org" . ldap))) | 361 | ("ldaps://ldap.gnu.org" . ldap))) |
| 333 | (customize-set-variable 'ldap-host-parameters-alist | 362 | (customize-set-variable 'ldap-host-parameters-alist |
| 334 | '(("ldaps://ldaps.gnu.org" | 363 | '(("ldaps://ldap.gnu.org" |
| 335 | auth-source t))) | 364 | auth-source t))) |
| 336 | @end lisp | 365 | @end lisp |
| 337 | 366 | ||
| @@ -349,6 +378,10 @@ binddn example\emacsuser password s3cr3t | |||
| 349 | @noindent | 378 | @noindent |
| 350 | and the @file{.emacs} expressions become: | 379 | and the @file{.emacs} expressions become: |
| 351 | 380 | ||
| 381 | @vindex message-mode-map | ||
| 382 | @findex eudc-expand-inline | ||
| 383 | @vindex eudc-server-hotlist | ||
| 384 | @vindex ldap-host-parameters-alist | ||
| 352 | @lisp | 385 | @lisp |
| 353 | (eval-after-load "message" | 386 | (eval-after-load "message" |
| 354 | '(define-key message-mode-map (kbd "TAB") 'eudc-expand-inline)) | 387 | '(define-key message-mode-map (kbd "TAB") 'eudc-expand-inline)) |