---
title: Charmhub | Deploy Userdir Ldap using Charmhub - The Open Operator Collection
description: Deploy the latest version of Userdir Ldap on any cloud.
url: https://charmhub.io/userdir-ldap/configurations
---

# Userdir Ldap

[Canonical BootStack Charmers](https://charmhub.io/publisher/bootstack-charmers "View all packages from Canonical BootStack Charmers")

* [Canonical BootStack Charmers](https://charmhub.io/publisher/bootstack-charmers "View all packages from Canonical BootStack Charmers")
* [Monitoring](https://charmhub.io/?filter=monitoring)

Platform:

24.04

22.04

20.04

18.04

16.04

stable 152

```
juju deploy userdir-ldap
```

[Learn to deploy on juju >](https://juju.is/docs/juju/manage-applications)

* [apt-repo-keys](https://charmhub.io/userdir-ldap/configurations#apt-repo-keys)
* [apt-repo-spec](https://charmhub.io/userdir-ldap/configurations#apt-repo-spec)
* [ciphers](https://charmhub.io/userdir-ldap/configurations#ciphers)
* [domain](https://charmhub.io/userdir-ldap/configurations#domain)
* [kex-algorithms](https://charmhub.io/userdir-ldap/configurations#kex-algorithms)
* [macs](https://charmhub.io/userdir-ldap/configurations#macs)
* [root-id-rsa](https://charmhub.io/userdir-ldap/configurations#root-id-rsa)
* [sudoer-group](https://charmhub.io/userdir-ldap/configurations#sudoer-group)
* [sudoer-password-groups](https://charmhub.io/userdir-ldap/configurations#sudoer-password-groups)
* [template-hostname](https://charmhub.io/userdir-ldap/configurations#template-hostname)
* [userdb-host](https://charmhub.io/userdir-ldap/configurations#userdb-host)
* [userdb-ip](https://charmhub.io/userdir-ldap/configurations#userdb-ip)
* [userdb-known-hosts](https://charmhub.io/userdir-ldap/configurations#userdb-known-hosts)
* [users-to-migrate](https://charmhub.io/userdir-ldap/configurations#users-to-migrate)

[Learn about configurations >](https://juju.is/docs/juju/configuration#heading--application-configuration)

* apt-repo-keys | string

  Default: FD9070E51DF0D4FBDF6FB5C8C018BA5B562AD4EF

  Apt repository key, typically needed for apt-repo-spec.
* apt-repo-spec | string

  Default: ppa:canonical-sysadmins/ud-ldap

  Apt repository to install userdir-ldap from.
* ciphers | string

  Default: chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com

  List of ciphers allowed. Defaults chacha20-poly1305@openssh.com available since OpenSSH 6.5, aes256-gcm@openssh.com and aes128-gcm@openssh.com available since OpenSSH 6.2. All supported in both Trusty and Xenial.
* domain | string

  Fallback domain when none present. This is mostly to work around MAAS's failure to add DNS for LXC containers - LP#1274947.
* kex-algorithms | string

  Default: curve25519-sha256@libssh.org

  KEX (Key Exchange) algorithms allowed. Default curve25519-sha256@libssh.org which has been available since OpenSSH 6.5 so already supported on both Trusty and Xenial.
* macs | string

  Default: umac-128-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-256

  List of MAC (message authentication code) algorithms allowed. Default MACs available since OpenSSH 6.2 so already supported on both Trusty and Xenial.
* root-id-rsa | string

  An openssh-format RSA private key with no passphrase. (This option is a trapdoor; setting it back to null has no real effect.)
* sudoer-group | string

  Default: bootstack-squad

  Comma separated groups of sudoers who do not require password
* sudoer-password-groups | string

  Comma separated groups of sudoers who require a password
* template-hostname | string

  If the files rsynced from sshdist don't match our hostname, create a symlink to bridge the gap from /var/lib/misc/thishost.
* userdb-host | string

  Default: userdb.internal

  Name of the userdb host
* userdb-ip | string

  Default: 185.125.190.212

  IP address of the userdb host
* userdb-known-hosts | string

  A (possibly multiple-line) string of known\_hosts entries to seed the userdb trust during install. If none specified, ssh-keyscan will be used.
* users-to-migrate | string

  Default: ubuntu

  A space-separated list of usernames whose authorized\_keys files should be migrated from ~/.ssh/authorized\_keys to /etc/ssh/user-authorized-keys on install.