forked from proxmox-mirrors/proxmox
72afba8b5b
The root DSE holds common attributes about the LDAP server itself. Needed to e.g. support Active Directory-based LDAP servers to retrieve the base DN from the server itself, based on an valid bind. See also RFC 4512, Section 5.1 [0] for more information about this special object. [0] https://www.rfc-editor.org/rfc/rfc4512#section-5.1 Signed-off-by: Christoph Heiss <c.heiss@proxmox.com>
69 lines
1.4 KiB
INI
69 lines
1.4 KiB
INI
debug = true
|
|
[ldap]
|
|
enabled = true
|
|
listen = "0.0.0.0:3893"
|
|
|
|
[ldaps]
|
|
enabled = true
|
|
listen = "0.0.0.0:3894"
|
|
cert = "tests/assets/glauth.crt"
|
|
key = "tests/assets/glauth.key"
|
|
|
|
|
|
|
|
[backend]
|
|
datastore = "config"
|
|
baseDN = "dc=example,dc=com"
|
|
nameformat = "cn"
|
|
groupformat = "ou"
|
|
anonymousdse = true
|
|
|
|
# to create a passSHA256: echo -n "mysecret" | openssl dgst -sha256
|
|
|
|
[[users]]
|
|
name = "test1"
|
|
givenname="Test 1"
|
|
sn="User"
|
|
mail = "test1@example.com"
|
|
uidnumber = 1001
|
|
primarygroup = 1000
|
|
passsha256 = "5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8" # password
|
|
|
|
[[users]]
|
|
name = "test2"
|
|
givenname="Test 2"
|
|
sn="User"
|
|
mail = "test2@example.com"
|
|
uidnumber = 1002
|
|
primarygroup = 1000
|
|
passsha256 = "5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8" # password
|
|
|
|
[[users]]
|
|
name = "test3"
|
|
givenname="Test 3"
|
|
sn="User"
|
|
mail = "test3@example.com"
|
|
uidnumber = 1003
|
|
primarygroup = 1000
|
|
passsha256 = "5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8" # password
|
|
|
|
|
|
[[users]]
|
|
name = "serviceuser"
|
|
mail = "serviceuser@example.com"
|
|
uidnumber = 1111
|
|
primarygroup = 1001
|
|
passsha256 = "5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8" # password
|
|
[[users.capabilities]]
|
|
action = "search"
|
|
object = "*"
|
|
|
|
[[groups]]
|
|
name = "testgroup"
|
|
gidnumber = 1000
|
|
|
|
[[groups]]
|
|
name = "svcaccts"
|
|
gidnumber = 1001
|
|
|