Database Backends

Backends validate credentials. In config v2 they live under auth.backends.

Main Structure

auth:
  backends:
    order:
      - cache
      - ldap
      - lua

Important:

• cache should remain first
• LDAP config lives under auth.backends.ldap
• Lua backend config lives under auth.backends.lua.backend
• Lua policy scripts live under auth.policy.attribute_sources.lua and auth.policy.obligation_targets.lua; hooks live under auth.controls.lua.hooks

Topics

• Protocols
• LDAP
• Lua
• Macros
• Cache Namespaces
• Encrypted Passwords

Named Backends

Named LDAP pools and named Lua backends are still supported through the order list:

auth:
  backends:
    order:
      - cache
      - ldap(pool1)
      - lua(reporting)

• ldap(pool1) refers to auth.backends.ldap.pools.pool1
• lua(reporting) refers to auth.backends.lua.backend.named_backends.reporting