# Configuration for Portainer CE/BE
###  Settings > Authentication > LDAP > Custom
---

## LDAP configuration

#### LDAP Server
```
localhost:3890 or ip-address:3890
```
#### Anonymous mode
```
off
```
#### Reader DN
```
uid=admin,ou=people,dc=example,dc=com
```
#### Password
```
xxx
```
* Password is the ENV you set at *LLDAP_LDAP_USER_PASS=* or `lldap_config.toml`

## User search configurations

#### Base DN
```
ou=people,dc=example,dc=com
```
#### Username attribute
```
uid
```
### Filter
#### All available user(s)
```
(objectClass=person)
```
* Using this filter will list all user registered in LLDAP

#### All user(s) from specific group
```
(&(objectClass=person)(memberof=cn=lldap_portainer,ou=groups,dc=example,dc=com))
```
* Using this filter will only list user that included in `lldap_portainer` group. 
* Admin should manually configure groups and add a user to it. **lldap_portainer** only sample.



## Group search configurations 

#### Group Base DN
```
ou=groups,dc=example,dc=com
```
#### Group Membership Attribute
```
cn
```
#### Group Filter 
```
is optional
```