# The distinguished name of the search base. base {{ nginx_ldap_base_dn }} # Another way to specify your LDAP server is to provide an uri {{ nginx_ldap_uri }} if {% nginx_ldap_login_attribute is defined %} pam_login_attribute {{ nginx_ldap_login_attribute }} {% endif %} if {% nginx_ldap_pam_groupdn is defined %} pam_groupdn {% endif %} # The LDAP version to use (defaults to 3 # if supported by client library) ldap_version 3 nss_initgroups_ignoreusers avahi,backup,bin,daemon,games,gnats,irc,libuuid,list,lp,mail,man,messagebus,munin,news,nslcd,proxy,root,rstudio-server,sshd,sync,sys,syslog,uucp,www-data