aceb5295efmoved Cosmos, Quick Setup and Credits out of the committed role READMEs and into the documentation build's own scratch checkout, so a committed copy can no longer go stale when the metadata moves. Merging feature/designer (ebad39422c) took origin/main's side of those files, which still carries them, and reinstated all 290 along with the cosmos make target and its i8cos alias. tests/lint/ansible/roles/test_readme.py hard-fails on a committed copy, and the reinstated Credits block credited one person with two URLs, which tripped the credits-attribution lint as well. Stripped with the repository's own fence-aware parser against MANAGED_SECTIONS, not with a line filter: the Cosmos block holds a mermaid fence a naive filter would cut through. The result is byte-identical toaceb5295effor every README that carries no prose change since. The cosmos target wrote the forbidden section straight back into the checkout, so it goes with them. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2.5 KiB
phpldapadmin
End of life. Infinito.Nexus neither maintains nor tests this role, and the default
INFINITO_LIFECYCLESenvelope keeps it out of every CI round. Deploy it at your own risk and take support from phpLDAPadmin.
Description
phpLDAPadmin is a web‑based LDAP client that provides an intuitive interface for managing LDAP directories. This containerized deployment leverages Docker Compose and Ansible automation to offer a secure, configurable environment for administering and exploring your LDAP configurations.
Overview
This deployment simplifies LDAP management by presenting a modern web interface that lets you search, modify, and manage directory entries easily. It supports integration with external LDAP servers and works seamlessly behind a reverse proxy, allowing administrators to focus on core directory tasks rather than deployment intricacies.
Features
-
Web‑Based LDAP Management:
Enjoy an intuitive and responsive interface to browse and administer your LDAP directories. -
Secure Reverse Proxy Setup:
Easily configure your access through a reverse proxy to ensure secure, controlled entry to your LDAP management tool. -
Docker Compose Integration:
Benefit from a streamlined, containerized deployment process that simplifies updates and environment configuration. -
Flexible Environment Configuration:
Customize your installation using environment variables and templated configuration files to match your infrastructure needs.
Other Resources
Persona contract opt-outs
phpLDAPadmin authenticates with an LDAP bind DN and the OpenLDAP administrator_database_password, not with the Keycloak administrator username/password pair, so the administrator persona has no in-app credential once it is through the oauth2-proxy. meta/services.yml additionally admits only the web-app-phpldapadmin administrator RBAC group to that proxy (sso.oauth2.allowed_groups), and biber carries an empty role list, so it is denied before phpLDAPadmin is reached. templates/playwright.env.j2 therefore declares PERSONA_BIBER_BLOCKED=true and PERSONA_ADMINISTRATOR_BLOCKED=true; the guest persona and the baseline assertions run unconditionally.