| if PACKAGE_libopenldap |
| config OPENLDAP_DEBUG |
| bool "Enable debugging information" |
| default y |
| help |
| Enable debugging information. This option must be enabled |
| for the loglevel directive to work. |
| config OPENLDAP_CRYPT |
| bool "Crypt(3) passwords support" |
| default n |
| help |
| With crypt(3) password storage scheme enabled, OpenLDAP can |
| receive and store SHA-256 and SHA-512 password hashes from |
| Samba AD-DC. If this option is disabled, synchronization of |
| passwords between Samba AD-DC (v4.5 and above) and OpenLDAP |
| requires use of cleartext passwords. |
| To enable crypt(3) password synchronization functionality: |
| 1. Re-include crypt(3) support in OpenWRT by enabling 'Include |
| crypt() support for SHA256, SHA512 and Blowfish ciphers' option |
| in "Advanced configuration options (for developers)" -> |
| "Toolchain Options". |
| 2. Provision AD-DC with 'password hash userPassword schemes' |
| option. For more information, see smb.conf manpage for details |
| on 'password hash userPassword schemes'. |
| 3. Use a script to synchronize passwords from AD-DC to |
| OpenLDAP. See samba-tool manpage for 'user syncpasswords'. |
| config OPENLDAP_MONITOR |
| bool "Enable monitor backend" |
| default n |
| help |
| Enable monitor backend to obtain information about the running |
| status of the daemon. See OpenLDAP documentation for more |
| information. |
| config OPENLDAP_DB47 |
| bool "Berkeley DB support" |
| default n |
| help |
| Enable Berkeley DB support (BDB). |
| config OPENLDAP_ICU |
| bool "ICU support" |
| default n |
| help |
| Enable ICU (International Components for Unicode) support. |
| endif |