Skip to content

Commit 1a0031f

Browse files
Update content/vault/v1.11.x/content/api-docs/auth/ldap.mdx
Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
1 parent 48ab6d8 commit 1a0031f

File tree

1 file changed

+6
-6
lines changed
  • content/vault/v1.11.x/content/api-docs/auth

1 file changed

+6
-6
lines changed

content/vault/v1.11.x/content/api-docs/auth/ldap.mdx

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -65,12 +65,12 @@ This endpoint configures the LDAP auth method.
6565
username passed when authenticating. Examples: `sAMAccountName`, `cn`, `uid`
6666
- `discoverdn` `(bool: false)` – Use anonymous bind to discover the bind DN of a
6767
user.
68-
- `deny_null_bind` `(bool: true)` – By default, Vault will prevent LDAP authentication
69-
attempts where the user provides an empty password (null binds). Setting this parameter
70-
to false allows Vault to support LDAP anonymous bind operations, which may be required
71-
for certain directory configurations that use anonymous search or discovery. When set to
72-
false, Vault defers the handling of empty-password authentication attempts to the LDAP
73-
server.
68+
- `deny_null_bind` `(bool: true)` – By default, Vault prevents LDAP authentication
69+
attempts when the user provides an empty password (null binds). Setting
70+
`deny_null_bind` to `false` tells Vault to defer the handling of empty-password
71+
authentication attempts to the LDAP server. You may want to allow LDAP
72+
anonymous bind operations for directory configurations using anonymous search
73+
or discovery.
7474
- `upndomain` `(string: "")` – The userPrincipalDomain used to construct the UPN
7575
string for the authenticating user. The constructed UPN will appear as
7676
`[username]@UPNDomain`. Example: `example.com`, which will cause vault to bind

0 commit comments

Comments
 (0)