Skip to content

Commit 57b2225

Browse files
Update content/vault/v1.7.x/content/docs/auth/ldap.mdx
Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
1 parent 40a8897 commit 57b2225

File tree

1 file changed

+6
-1
lines changed
  • content/vault/v1.7.x/content/docs/auth

1 file changed

+6
-1
lines changed

content/vault/v1.7.x/content/docs/auth/ldap.mdx

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -123,7 +123,12 @@ There are two alternate methods of resolving the user object used to authenticat
123123
- `discoverdn` (bool, optional) - If true, use anonymous bind to discover the bind DN of a user
124124
- `userdn` (string, optional) - Base DN under which to perform user search. Example: `ou=Users,dc=example,dc=com`
125125
- `userattr` (string, optional) - Attribute on user attribute object matching the username passed when authenticating. Examples: `sAMAccountName`, `cn`, `uid`
126-
- `deny_null_bind` (bool, optional) - By default, Vault will prevent LDAP authentication attempts where the user provides an empty password (null binds). Setting this parameter to false allows Vault to support LDAP anonymous bind operations, which may be required for certain directory configurations that use anonymous search or discovery. When set to false, Vault defers the handling of empty-password authentication attempts to the LDAP server. The default is `true`.
126+
- `deny_null_bind` `(bool: true)` – By default, Vault prevents LDAP authentication
127+
attempts when the user provides an empty password (null binds). Setting
128+
`deny_null_bind` to `false` tells Vault to defer the handling of empty-password
129+
authentication attempts to the LDAP server. You may want to allow LDAP
130+
anonymous bind operations for directory configurations using anonymous search
131+
or discovery.
127132
- `anonymous_group_search` (bool, optional) - Use anonymous binds when performing LDAP group searches. Defaults to `false`.
128133

129134
#### Binding - User Principal Name (AD)

0 commit comments

Comments
 (0)