mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 19:01:54 +00:00
kevinveenbirkenbachandClaude Opus 5.5
bb0e2016d9
The mod_auth_ldap2 override redeclares VirtualHost "meet.jitsi" with authentication = "ldap2". It was staged whenever LDAP was enabled, also with SSO, where JITSI_AUTH_TYPE is internal and ENABLE_AUTH is false: the web client then logs in anonymously, Prosody offers no matching mechanism, and every conference join fails with "connfail[no-auth-mech]" and reloads every 17 seconds. The role's own spec only reaches the prejoin lobby, so it never noticed. The override is now staged only when JITSI_AUTH_TYPE is ldap, and an override left by an earlier deploy is removed otherwise. Found by the new Matrix Jitsi spec against the shared Jitsi (#1165). Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
17 lines
661 B
Django/Jinja
17 lines
661 B
Django/Jinja
-- LDAP authentication for the public XMPP domain (mod_auth_ldap2).
|
|
-- Rendered only when JITSI_AUTH_TYPE is ldap (LDAP enabled, SSO disabled).
|
|
VirtualHost "{{ JITSI_XMPP_DOMAIN }}"
|
|
authentication = "ldap2"
|
|
ldap = {
|
|
hostname = "{{ LDAP.SERVER.DOMAIN }}";
|
|
port = {{ LDAP.SERVER.PORT }};
|
|
use_tls = false;
|
|
bind_dn = "{{ LDAP.DN.ADMINISTRATOR.DATA }}";
|
|
bind_password = "{{ LDAP.BIND_CREDENTIAL }}";
|
|
user = {
|
|
usernamefield = "{{ LDAP.USER.ATTRIBUTES.ID }}";
|
|
basedn = "{{ LDAP.DN.OU.USERS }}";
|
|
filter = "(objectclass=inetOrgPerson)";
|
|
};
|
|
}
|