LDAP authentication

Authenticate users against an LDAP / Active Directory directory.

Type	ldapAuth
Category	Access

Fields

Field	Type	Required	Default	Description
url	text	yes	—	e.g. ldap://ldap.example.com:389.
baseDN	text	yes	—	e.g. ou=users,dc=example,dc=com.
bindDN	text	yes	—	DN used to bind for user lookups.
bindPass	text	yes	—	Bind password. Secret — encrypted at rest, never returned by the API.
userFilter	text	yes	—	e.g. (uid=%s).
realm	text	no	—	Shown by the browser's auth prompt.
forwardUsername	true/false	no	—	Forward username to backend.
startTLS	true/false	no	—	Upgrade the connection to TLS.
insecureSkipVerify	true/false	no	—	Skip TLS verification.
connPool	group	no	—	Reuse LDAP connections for bind lookups.

connPool

Reuse LDAP connections for bind lookups.

Field	Type	Required	Default	Description
size	number	no	—	Max pooled connections.
burst	number	no	—	Extra connections allowed in a spike.
ttl	duration (e.g. 10m)	no	—	How long a pooled connection lives, e.g. 30s.

Secret fields

Fields marked secret are encrypted at rest and never returned by the API. Editing the middleware leaves a stored secret in place unless you type a new value — an empty box means "keep what is stored", not "clear it".