add module for ldap configuration

This commit is contained in:
psy 2021-12-21 09:00:44 +01:00
parent 5d34a1637f
commit 11d1a026aa
No known key found for this signature in database
GPG key ID: DFF5B17AC3A8ECF5
3 changed files with 176 additions and 0 deletions

View file

@ -15,3 +15,75 @@ nextcloud:
```
All configured groups have full edit rights in the group folder.
LDAP connection is configured as follows:
```yaml
nextcloud:
ldap:
config_id: 's01' # use existing or next free configuration
config:
"hasMemberOfFilterSupport": 1
"homeFolderNamingRule": ""
"lastJpegPhotoLookup": 0
"ldapAgentName": "cn=nextcloud,ou=system,dc=example,dc=com"
"ldapAgentPassword": ""
"ldapAttributesForGroupSearch": ""
"ldapAttributesForUserSearch": ""
"ldapBackupHost": ""
"ldapBackupPort": ""
"ldapBase":
- "ou=users,dc=example,dc=com"
"ldapBaseGroups":
- "ou=groups,dc=example,dc=com"
"ldapBaseUsers":
- "ou=users,dc=example,dc=com"
"ldapCacheTTL": 600
"ldapDefaultPPolicyDN": ""
"ldapDynamicGroupMemberURL": ""
"ldapEmailAttribute": "mail"
"ldapExperiencedAdmin": 0
"ldapExpertUUIDGroupAttr": ""
"ldapExpertUUIDUserAttr": "uid"
"ldapExpertUsernameAttr": "uid"
"ldapExtStorageHomeAttribute": ""
"ldapGidNumber": "gidNumber"
"ldapGroupDisplayName": "cn"
"ldapGroupFilter": "(&(|(objectclass=groupOfUniqueNames))(|(cn=service_nextcloud_admin)(!(cn=service_*))))"
"ldapGroupFilterGroups":
- "service_gitlab_access"
"ldapGroupFilterMode": 0
"ldapGroupFilterObjectclass":
- "top"
"ldapGroupMemberAssocAttr": "uniqueMember"
"ldapHost": "ldaps://sso.example.com"
"ldapIgnoreNamingRules": false
"ldapLoginFilter": "(&(objectClass=posixAccount)(memberOf=cn=service_nextcloud_access,ou=groups,dc=example,dc=com)(uid=%uid))"
"ldapLoginFilterAttributes": ""
"ldapLoginFilterEmail": 0
"ldapLoginFilterMode": 1
"ldapLoginFilterUsername": 1
"ldapMatchingRuleInChainState": "unknown"
"ldapNestedGroups": 0
"ldapOverrideMainServer": ""
"ldapPagingSize": 500
"ldapPort": 636
"ldapQuotaAttribute": ""
"ldapQuotaDefault": ""
"ldapTLS": 0
"ldapUserAvatarRule": "default"
"ldapUserDisplayName": "displayname"
"ldapUserDisplayName2": ""
"ldapUserFilter": "(&(objectClass=posixAccount)(memberOf=cn=service_nextcloud_access,ou=groups,dc=example,dc=com))"
"ldapUserFilterGroups":
- "service_nextcloud_access"
"ldapUserFilterMode": 1
"ldapUserFilterObjectclass":
- "posixAccount"
"ldapUuidGroupAttribute": "auto"
"ldapUuidUserAttribute": "auto"
"turnOffCertCheck": 1
"turnOnPasswordChange": 0
"useMemberOfToDetectMembership": 1
```