-- Use Include 'prosody-posix-ldap.cfg.lua' from prosody.cfg.lua to include this file

authentication = 'ldap2' -- Indicate that we want to use LDAP for authentication

storage        = 'ldap'  -- Indicate that we want to use LDAP for roster/vcard storage

ldap = {

    hostname      = 'localhost',                    -- LDAP server location

    bind_dn       = 'cn=Manager,dc=example,dc=com', -- Bind DN for LDAP authentication (optional if anonymous bind is supported)

    bind_password = 'prosody',                      -- Bind password (optional if anonymous bind is supported)

    user = {

      basedn        = 'ou=Users,dc=example,dc=com',                  -- The base DN where user records can be found

      filter        = '(&(objectClass=posixAccount)(!(uid=seven)))', -- Filter expression to find user records under basedn

      usernamefield = 'uid',                                         -- The field that contains the user's ID (this will be the username portion of the JID)

      namefield     = 'cn',                                          -- The field that contains the user's full name (this will be the alias found in the roster)

    },

    groups = {

      basedn      = 'ou=Groups,dc=example,dc=com', -- The base DN where group records can be found

      memberfield = 'memberUid',                   -- The field that contains user ID records for this group (each member must have a corresponding entry under the user basedn with the same value in usernamefield)

      namefield   = 'cn',                          -- The field that contains the group's name (used for matching groups in LDAP to group definitions below)

      {

        name  = 'everyone', -- The group name that will be seen in users' rosters

        cn    = 'Everyone', -- This field's key *must* match ldap.groups.namefield! It's the name of the LDAP group this definition represents

        admin = false,      -- (Optional) A boolean flag that indicates whether members of this group should be considered administrators.

      },

      {

        name  = 'admin',

        cn    = 'Admin',

        admin = true,

      },

    },

    vcard_format = {

      displayname = 'cn', -- Consult the vCard configuration section in the README

      nickname    = 'uid',

      photo       = {

        type   = 'image/jpeg',

        binval = 'jpegPhoto',

      },

      telephone = {

        work = {

          voice = true,

          number = 'telephoneNumber',

        },

      },

    },

}