gandc/lldap
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

example_config: adjusted addressand attributes for authelia 5.0.0 compliance

Browse Source
This commit is contained in:
sean 2024-07-10 15:51:41 -04:00 committed by nitnelave
parent 6f46ffd1e4
commit 6eb5b959bf
1 changed files with 9 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
example_configs/authelia_config.yml
View File

@ -15,7 +15,7 @@ authentication_backend:
implementation: custom implementation: custom
# Pattern is ldap://HOSTNAME-OR-IP:PORT # Pattern is ldap://HOSTNAME-OR-IP:PORT
# Normal ldap port is 389, standard in LLDAP is 3890 # Normal ldap port is 389, standard in LLDAP is 3890
url: ldap://lldap:3890 address: ldap://lldap:3890
# The dial timeout for LDAP. # The dial timeout for LDAP.
timeout: 5s timeout: 5s
# Use StartTLS with the LDAP connection, TLS not supported right now # Use StartTLS with the LDAP connection, TLS not supported right now
@ -25,7 +25,6 @@ authentication_backend:
# minimum_version: TLS1.2 # minimum_version: TLS1.2
# Set base dn, like dc=google,dc.com # Set base dn, like dc=google,dc.com
base_dn: dc=example,dc=com base_dn: dc=example,dc=com
username_attribute: uid
# You need to set this to ou=people, because all users are stored in this ou! # You need to set this to ou=people, because all users are stored in this ou!
additional_users_dn: ou=people additional_users_dn: ou=people
# To allow sign in both with username and email, one can use a filter like # To allow sign in both with username and email, one can use a filter like
@ -36,11 +35,14 @@ authentication_backend:
# The groups are not displayed in the UI, but this filter works. # The groups are not displayed in the UI, but this filter works.
groups_filter: "(member={dn})" groups_filter: "(member={dn})"
# The attribute holding the name of the group. # The attribute holding the name of the group.
group_name_attribute: cn attributes:
# Email attribute display_name: displayName
mail_attribute: mail username: uid
# The attribute holding the display name of the user. This will be used to greet an authenticated user. group_name: cn
display_name_attribute: displayName mail: mail
# distinguished_name: distinguishedName
# member_of: memberOf
# The username and password of the bind user. # The username and password of the bind user.
# "bind_user" should be the username you created for authentication with the "lldap_strict_readonly" permission. It is not recommended to use an actual admin account here. # "bind_user" should be the username you created for authentication with the "lldap_strict_readonly" permission. It is not recommended to use an actual admin account here.
# If you are configuring Authelia to change user passwords, then the account used here needs the "lldap_password_manager" permission instead. # If you are configuring Authelia to change user passwords, then the account used here needs the "lldap_password_manager" permission instead.