Helix Core is now P4. Product user interfaces will be updated soon. Learn more >>

P4 Server Administration Documentation | 2025.1

# Defining LDAP-related configurables

To use LDAP authentication, you must set a number of authentication-related configurables:

- auth.ldap.order.N - enables an LDAP server and specifies the order in which it should be searched.
- auth.default.method - specifies whether new users should be authenticated by P4 Server or using LDAP.
  - If auth.default.method=perforce and you want only the P4 Server superuser to create new users, set `dm.user.noautocreate` to 2 explicitly.
  - If auth.default.method=ldap, `dm.user.noautocreate` is 2 implicitly.

- auth.ldap.userautocreate - specifies whether new users should be automatically created on login when using LDAP authentication. This requires `auth.default.method=ldap`.

  You can set the `getattrs` Options field of the LDAP configuration to have the `FullName` and `Email` fields populated from the directory.

- auth.ldap.timeout - time to wait before giving up on a connection attempt.
- auth.ldap.cafile - the path to a file used for certification when the LDAP server uses SSL or TLS.
- auth.ldap.ssllevel - level of SSL/TLS certificate validation.
- auth.ldap.pagesize - helps you manage LDAP searches with paged results by setting limits to page size.

For example, the following commands use a p4 configure `set` command to define the search order for active directories and the default authentication method for new users to be `perforce`:

Copy

    p4 configure set auth.ldap.order.1=UK_LDAP
    p4 configure set auth.ldap.order.2=US_LDAP
    p4 configure set auth.ldap.order.5=RU_LDAP
    p4 configure set auth.default.method=perforce

To learn more, see the Categories of Configurables in the P4 CLI Reference.

Your search for returned results