mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-11-04 04:08:15 +00:00
Kevin Veen-Birkenbach
cb66fb2978
- Converted group_vars/all/13_ldap.yml from lower-case to ALL-CAPS nested keys. - Updated all roles, tasks, templates, and filter_plugins to reference LDAP.* instead of ldap.*. - Fixed Keycloak JSON templates to properly quote Jinja variables. - Adjusted svc-db-openldap filter plugins and unit tests to handle new LDAP structure. - Updated integration test to only check uniqueness of TOP-LEVEL ALL-CAPS constants, ignoring nested keys. See: https://chatgpt.com/share/68b01017-efe0-800f-a508-7d7e2f1c8c8d
51 lines
1.9 KiB
Django/Jinja
51 lines
1.9 KiB
Django/Jinja
<?php
|
|
// Source: https://git.friendi.ca/friendica/friendica-addons/src/branch/develop/ldapauth
|
|
|
|
// Warning: Don't change this file! It only holds the default config values for this addon.
|
|
// Instead, copy this file to config/ldapauth.config.php in your Friendica directory and set the correct values there
|
|
|
|
return [
|
|
'ldapauth' => [
|
|
// ldap_server (String)
|
|
// ldap hostname server - required
|
|
// Example: ldap_server = host.example.com
|
|
'ldap_server' => '{{ LDAP.SERVER.URI }}',
|
|
|
|
// ldap_binddn (String)
|
|
// admin dn - optional - only if ldap server dont have anonymous access
|
|
// Example: ldap_binddn = cn=admin,dc=example,dc=com
|
|
'ldap_binddn' => '{{ LDAP.DN.ADMINISTRATOR.DATA }}',
|
|
|
|
// ldap_bindpw (String)
|
|
// admin password - optional - only if ldap server dont have anonymous access
|
|
'ldap_bindpw' => '{{ LDAP.BIND_CREDENTIAL }}',
|
|
|
|
// ldap_searchdn (String)
|
|
// dn to search users - required
|
|
// Example: ldap_searchdn = ou=users,dc=example,dc=com
|
|
'ldap_searchdn' => '{{ LDAP.DN.OU.USERS }}',
|
|
|
|
// ldap_userattr (String)
|
|
// attribute to find username - required
|
|
// Example: ldap_userattr = uid
|
|
'ldap_userattr' => '{{ LDAP.USER.ATTRIBUTES.ID }}',
|
|
|
|
// ldap_group (String)
|
|
// DN of the group whose member can auth on Friendica - optional
|
|
'ldap_group' =>'',
|
|
|
|
// ldap_autocreateaccount (Boolean)
|
|
// To create Friendica account if user exists in ldap
|
|
// Requires an email and a simple (beautiful) nickname on user ldap object
|
|
// active account creation - optional - default true
|
|
'ldap_autocreateaccount' => true,
|
|
|
|
// ldap_autocreateaccount_emailattribute (String)
|
|
// attribute to get email - optional - default : 'mail'
|
|
'ldap_autocreateaccount_emailattribute' => '{{ LDAP.USER.ATTRIBUTES.MAIL }}',
|
|
|
|
// ldap_autocreateaccount_nameattribute (String)
|
|
// attribute to get nickname - optional - default : 'givenName'
|
|
'ldap_autocreateaccount_nameattribute' => '{{ LDAP.USER.ATTRIBUTES.FIRSTNAME }}',
|
|
],
|
|
]; |