Flaschengeist/flaschengeist
Flaschengeist
/
flaschengeist
7
0
Fork 0
Code Issues 20 Pull Requests Packages Projects Releases 2 Wiki Activity

„plugins_auth_ldap“ ändern

ferfissimo 2021-07-29 12:12:12 +00:00
parent f2e996263c
commit 3c9516947e
1 changed files with 10 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
plugins_auth_ldap.md

@ -4,6 +4,9 @@ This plugin provides authentification over LDAP.
* [Configuration](#configuration) * [Configuration](#configuration)
* [Set up password hash](#set-up-password-hash) * [Set up password hash](#set-up-password-hash)
* [Set up SSL (LDAPS)](#set-up-ssl-ldap-over-ssl) * [Set up SSL (LDAPS)](#set-up-ssl-ldap-over-ssl)
* [Set object classes for new entries](#set-object-classes-for-new-entries)
* [Set attributes for new entries](#set-attributes-for-new-entries)
* [Set DN for new entries](#set-dn-for-new-entries)
## Configuration ## Configuration
@ -62,7 +65,7 @@ ca_cert = "/etc/ssl/my-ca.crt"
``` ```
### Set object classes for new entries ### Set object classes for new entries
The default object class set is `inetOrgPerson`, but you can override it using The default object class is `inetOrgPerson`, but you can override it using
```toml ```toml
[auth_ldap] [auth_ldap]
# ... # ...
@ -91,9 +94,9 @@ To specify other attributes add this to you configuration:
gidNumber = 1001 gidNumber = 1001
homeDirectory = "/home/{userid}" homeDirectory = "/home/{userid}"
loginShell = "/bin/bash" loginShell = "/bin/bash"
uidNumber = "1000+" uidNumber = 1000
``` ```
A special attribute is `uidNumber`, specifying a "X+" does mean to use an incrementing generator starting at 1000 (or highest uidNumber in active directory). A special attribute is `uidNumber`, specifying a number x does mean to use an incrementing generator starting at x (or highest uidNumber in active directory).
And as you can see you can use placeholders, valid ones: And as you can see you can use placeholders, valid ones:
* `userid` * `userid`
@ -101,7 +104,6 @@ And as you can see you can use placeholders, valid ones:
* `firstname` * `firstname`
* `lastname` * `lastname`
* `mail` * `mail`
* `birthday`
### Set DN for new entries ### Set DN for new entries
You can specify a DN template if your user schema requires it, the default one is: You can specify a DN template if your user schema requires it, the default one is:
@ -112,3 +114,7 @@ To specify a different template use:
```toml ```toml
dn_template = "cn={user.firstname} {user.lastname},ou=user,{base_dn}" dn_template = "cn={user.firstname} {user.lastname},ou=user,{base_dn}"
``` ```
### Other various configuration options
Other optional configuration values include:
* `search_dn`, where to search for users, default `ou=people,{base_dn}`