LDAP User Directory

Defines how to connect to LDAP server and retrieve user information used in User Data section

Note that the password to bind to LDAP server is stored unencrypted in client system's registry; you should use a restricted search account (only able to perform LDAP searches).

User unique attribute must correspond to the logged on user's Windows user name without domain.

LDAP Server configuration

Server:

Registry Hive	HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
Registry Path	Software\Policies\LibreOffice\org.openoffice.LDAP\UserDirectory\ServerDefinition\Server
Value Name	Value
Value Type	REG_SZ
Default Value	example.com

Port:

Registry Hive	HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
Registry Path	Software\Policies\LibreOffice\org.openoffice.LDAP\UserDirectory\ServerDefinition\Port
Value Name	Value
Value Type	REG_DWORD
Default Value	389
Min Value
Max Value

LDAP Search configuration

Username to bind:

Registry Hive	HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
Registry Path	Software\Policies\LibreOffice\org.openoffice.LDAP\UserDirectory\SearchUser
Value Name	Value
Value Type	REG_SZ
Default Value	example\bindLdap

Password to bind:

Registry Hive	HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
Registry Path	Software\Policies\LibreOffice\org.openoffice.LDAP\UserDirectory\SearchPassword
Value Name	Value
Value Type	REG_SZ
Default Value

Base DN for search:

Registry Hive	HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
Registry Path	Software\Policies\LibreOffice\org.openoffice.LDAP\UserDirectory\ServerDefinition\BaseDN
Value Name	Value
Value Type	REG_SZ
Default Value	cn=Users,dc=example,dc=com

User object class:

Registry Hive	HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
Registry Path	Software\Policies\LibreOffice\org.openoffice.LDAP\UserDirectory\UserObjectClass
Value Name	Value
Value Type	REG_SZ
Default Value	user

User unique attribute:

Registry Hive	HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
Registry Path	Software\Policies\LibreOffice\org.openoffice.LDAP\UserDirectory\UserUniqueAttribute
Value Name	Value
Value Type	REG_SZ
Default Value	sAMAccountName