title="<?phpp($l->t('You can omit the protocol, except you require SSL. Then start with ldaps://'));?>"
/>
<span>
<inputtype="number"id="ldap_port"name="ldap_port"
class="invisible lwautosave"
placeholder="<?phpp($l->t('Port'));?>" />
</span>
</div>
</div>
</div>
<divclass="tablerow">
<inputtype="text"id="ldap_dn"name="ldap_dn"
class="tablecell lwautosave"
placeholder="<?phpp($l->t('User DN'));?>"
title="<?phpp($l->t('The DN of the client user with which the bind shall be done, e.g. uid=agent,dc=example,dc=com. For anonymous access, leave DN and Password empty.'));?>"
print_unescaped('<pclass="ldapwarning">'.$l->t('<b>Warning:</b> Apps user_ldap and user_webdavauth are incompatible. You may experience unexpected behavior. Please ask your system administrator to disable one of them.').'</p>');
print_unescaped('<pclass="ldapwarning">'.$l->t('<b>Warning:</b> Apps user_ldap and user_webdavauth are incompatible. You may experience unexpected behavior. Please ask your system administrator to disable one of them.').'</p>');
@ -12,65 +14,19 @@
print_unescaped('<pclass="ldapwarning">'.$l->t('<b>Warning:</b> The PHP LDAP module is not installed, the backend will not work. Please ask your system administrator to install it.').'</p>');
print_unescaped('<pclass="ldapwarning">'.$l->t('<b>Warning:</b> The PHP LDAP module is not installed, the backend will not work. Please ask your system administrator to install it.').'</p>');
title="<?phpp($l->t('The DN of the client user with which the bind shall be done, e.g. uid=agent,dc=example,dc=com. For anonymous access, leave DN and Password empty.'));?>" /></p>
title="<?phpp($l->t('Defines the filter to apply, when login is attempted. %%uid replaces the username in the login action. Example: "uid=%%uid"'));?>" /></p>
<p><labelfor="ldap_userlist_filter"><?phpp($l->t('User List Filter'));?></label>
title="<?phpp($l->t('Defines the filter to apply, when retrieving groups (no placeholders). Example: "objectClass=posixGroup"'));?>" /></p>
</fieldset>
<fieldsetid="ldapSettings-2">
<divid="ldapAdvancedAccordion">
<divid="ldapAdvancedAccordion">
<h3><?phpp($l->t('Connection Settings'));?></h3>
<h3><?phpp($l->t('Connection Settings'));?></h3>
<div>
<div>
<p><labelfor="ldap_configuration_active"><?phpp($l->t('Configuration Active'));?></label><inputtype="checkbox"id="ldap_configuration_active"name="ldap_configuration_active"value="1"data-default="<?phpp($_['ldap_configuration_active_default']);?>"title="<?phpp($l->t('When unchecked, this configuration will be skipped.'));?>"/></p>
<p><labelfor="ldap_configuration_active"><?phpp($l->t('Configuration Active'));?></label><inputtype="checkbox"id="ldap_configuration_active"name="ldap_configuration_active"value="1"data-default="<?phpp($_['ldap_configuration_active_default']);?>"title="<?phpp($l->t('When unchecked, this configuration will be skipped.'));?>"/></p>
title="<?phpp($l->t('Defines the filter to apply, when login is attempted. %%uid replaces the username in the login action. Example: "uid=%%uid"'));?>" /></p>
<p><labelfor="ldap_backup_host"><?phpp($l->t('Backup (Replica) Host'));?></label><inputtype="text"id="ldap_backup_host"name="ldap_backup_host"data-default="<?phpp($_['ldap_backup_host_default']);?>"title="<?phpp($l->t('Give an optional backup host. It must be a replica of the main LDAP/AD server.'));?>"></p>
<p><labelfor="ldap_backup_host"><?phpp($l->t('Backup (Replica) Host'));?></label><inputtype="text"id="ldap_backup_host"name="ldap_backup_host"data-default="<?phpp($_['ldap_backup_host_default']);?>"title="<?phpp($l->t('Give an optional backup host. It must be a replica of the main LDAP/AD server.'));?>"></p>
<p><labelfor="ldap_override_main_server"><?phpp($l->t('Disable Main Server'));?></label><inputtype="checkbox"id="ldap_override_main_server"name="ldap_override_main_server"value="1"data-default="<?phpp($_['ldap_override_main_server_default']);?>"title="<?phpp($l->t('Only connect to the replica server.'));?>"/></p>
<p><labelfor="ldap_override_main_server"><?phpp($l->t('Disable Main Server'));?></label><inputtype="checkbox"id="ldap_override_main_server"name="ldap_override_main_server"value="1"data-default="<?phpp($_['ldap_override_main_server_default']);?>"title="<?phpp($l->t('Only connect to the replica server.'));?>"/></p>
<p><labelfor="ldap_tls"><?phpp($l->t('Use TLS'));?></label><inputtype="checkbox"id="ldap_tls"name="ldap_tls"value="1"data-default="<?phpp($_['ldap_tls_default']);?>"title="<?phpp($l->t('Do not use it additionally for LDAPS connections, it will fail.'));?>"/></p>
<p><labelfor="ldap_nocase"><?phpp($l->t('Case insensitve LDAP server (Windows)'));?></label><inputtype="checkbox"id="ldap_nocase"name="ldap_nocase"data-default="<?phpp($_['ldap_nocase_default']);?>"value="1"<?phpif(isset($_['ldap_nocase'])&&($_['ldap_nocase']))p(' checked');?>></p>
<p><labelfor="ldap_nocase"><?phpp($l->t('Case insensitve LDAP server (Windows)'));?></label><inputtype="checkbox"id="ldap_nocase"name="ldap_nocase"data-default="<?phpp($_['ldap_nocase_default']);?>"value="1"<?phpif(isset($_['ldap_nocase'])&&($_['ldap_nocase']))p(' checked');?>></p>
<p><labelfor="ldap_turn_off_cert_check"><?phpp($l->t('Turn off SSL certificate validation.'));?></label><inputtype="checkbox"id="ldap_turn_off_cert_check"name="ldap_turn_off_cert_check"title="<?phpp($l->t('Not recommended, use it for testing only! If connection only works with this option, import the LDAP server\'s SSL certificate in your %s server.',$theme->getName()));?>"data-default="<?phpp($_['ldap_turn_off_cert_check_default']);?>"value="1"><br/></p>
<p><labelfor="ldap_turn_off_cert_check"><?phpp($l->t('Turn off SSL certificate validation.'));?></label><inputtype="checkbox"id="ldap_turn_off_cert_check"name="ldap_turn_off_cert_check"title="<?phpp($l->t('Not recommended, use it for testing only! If connection only works with this option, import the LDAP server\'s SSL certificate in your %s server.',$theme->getName()));?>"data-default="<?phpp($_['ldap_turn_off_cert_check_default']);?>"value="1"><br/></p>
<p><labelfor="ldap_cache_ttl"><?phpp($l->t('Cache Time-To-Live'));?></label><inputtype="number"id="ldap_cache_ttl"name="ldap_cache_ttl"title="<?phpp($l->t('in seconds. A change empties the cache.'));?>"data-default="<?phpp($_['ldap_cache_ttl_default']);?>"/></p>
<p><labelfor="ldap_cache_ttl"><?phpp($l->t('Cache Time-To-Live'));?></label><inputtype="number"id="ldap_cache_ttl"name="ldap_cache_ttl"title="<?phpp($l->t('in seconds. A change empties the cache.'));?>"data-default="<?phpp($_['ldap_cache_ttl_default']);?>"/></p>
@ -93,8 +49,9 @@
<p><labelfor="home_folder_naming_rule"><?phpp($l->t('User Home Folder Naming Rule'));?></label><inputtype="text"id="home_folder_naming_rule"name="home_folder_naming_rule"title="<?phpp($l->t('Leave empty for user name (default). Otherwise, specify an LDAP/AD attribute.'));?>"data-default="<?phpp($_['home_folder_naming_rule_default']);?>"/></p>
<p><labelfor="home_folder_naming_rule"><?phpp($l->t('User Home Folder Naming Rule'));?></label><inputtype="text"id="home_folder_naming_rule"name="home_folder_naming_rule"title="<?phpp($l->t('Leave empty for user name (default). Otherwise, specify an LDAP/AD attribute.'));?>"data-default="<?phpp($_['home_folder_naming_rule_default']);?>"/></p>
<pclass="ldapIndent"><?phpp($l->t('By default the internal username will be created from the UUID attribute. It makes sure that the username is unique and characters do not need to be converted. The internal username has the restriction that only these characters are allowed: [ a-zA-Z0-9_.@- ]. Other characters are replaced with their ASCII correspondence or simply omitted. On collisions a number will be added/increased. The internal username is used to identify a user internally. It is also the default name for the user home folder. It is also a part of remote URLs, for instance for all *DAV services. With this setting, the default behavior can be overridden. To achieve a similar behavior as before ownCloud 5 enter the user display name attribute in the following field. Leave it empty for default behavior. Changes will have effect only on newly mapped (added) LDAP users.'));?></p>
<pclass="ldapIndent"><?phpp($l->t('By default the internal username will be created from the UUID attribute. It makes sure that the username is unique and characters do not need to be converted. The internal username has the restriction that only these characters are allowed: [ a-zA-Z0-9_.@- ]. Other characters are replaced with their ASCII correspondence or simply omitted. On collisions a number will be added/increased. The internal username is used to identify a user internally. It is also the default name for the user home folder. It is also a part of remote URLs, for instance for all *DAV services. With this setting, the default behavior can be overridden. To achieve a similar behavior as before ownCloud 5 enter the user display name attribute in the following field. Leave it empty for default behavior. Changes will have effect only on newly mapped (added) LDAP users.'));?></p>
<p><strong><?phpp($l->t('Username-LDAP User Mapping'));?></strong></p>
<p><strong><?phpp($l->t('Username-LDAP User Mapping'));?></strong></p>
<pclass="ldapIndent"><?phpp($l->t('Usernames are used to store and assign (meta) data. In order to precisely identify and recognize users, each LDAP user will have a internal username. This requires a mapping from username to LDAP user. The created username is mapped to the UUID of the LDAP user. Additionally the DN is cached as well to reduce LDAP interaction, but it is not used for identification. If the DN changes, the changes will be found. The internal username is used all over. Clearing the mappings will have leftovers everywhere. Clearing the mappings is not configuration sensitive, it affects all LDAP configurations! Never clear the mappings in a production environment, only in a testing or experimental stage.'));?></p>
<pclass="ldapIndent"><?phpp($l->t('Usernames are used to store and assign (meta) data. In order to precisely identify and recognize users, each LDAP user will have a internal username. This requires a mapping from username to LDAP user. The created username is mapped to the UUID of the LDAP user. Additionally the DN is cached as well to reduce LDAP interaction, but it is not used for identification. If the DN changes, the changes will be found. The internal username is used all over. Clearing the mappings will have leftovers everywhere. Clearing the mappings is not configuration sensitive, it affects all LDAP configurations! Never clear the mappings in a production environment, only in a testing or experimental stage.'));?></p>
<pclass="ldapIndent"><buttonid="ldap_action_clear_user_mappings"name="ldap_action_clear_user_mappings"><?phpp($l->t('Clear Username-LDAP User Mapping'));?></button><br/><buttonid="ldap_action_clear_group_mappings"name="ldap_action_clear_group_mappings"><?phpp($l->t('Clear Groupname-LDAP Group Mapping'));?></button></p>
<pclass="ldapIndent"><buttonid="ldap_action_clear_user_mappings"name="ldap_action_clear_user_mappings"><?phpp($l->t('Clear Username-LDAP User Mapping'));?></button><br/><buttonid="ldap_action_clear_group_mappings"name="ldap_action_clear_group_mappings"><?phpp($l->t('Clear Groupname-LDAP Group Mapping'));?></button></p>