better configuration example

conf/attributes.yml

@@ -2,7 +2,6 @@ cn:
     description: "First Name and Display Name"
     display_name: "Display Name"
     type: string
-    search_displayed: True
     weight: 30
     autofill: 
         function: cn
@@ -11,8 +10,7 @@ cn:
             - $name
     backends:
         ldap: cn
-        ad: CN
+#        ad: CN
-
 first-name:
     description: "First name of the user"
     display_name: "First Name"
@@ -21,7 +19,7 @@ first-name:
     weight: 20
     backends:
         ldap: givenName
-        ad: givenName
+#        ad: givenName
 name:
     description: "Family name of the user"
     display_name: "Name"
@@ -30,10 +28,11 @@ name:
     type: string
     backends:
         ldap: sn
-        ad: sn
+#        ad: sn
 email:
     description: "Email of the user"
     display_name: "Email"
+    search_displayed: True
     type: email
     weight: 40
     autofill: 
@@ -43,8 +42,8 @@ email:
             - $last-name
             - '@example.com'
     backends:
-        ldap: email
+        ldap: mail
-        ad: EMAIL
+#        ad: mail
 uid:
     description: "UID of the user"
     display_name: "UID"
@@ -59,7 +58,7 @@ uid:
             - $last-name
     backends:
         ldap: uid
-        ad: UID
+#        ad: uid
 uidNumber:
     description: "User ID Number of the user"
     display_name: "UID Number"
@@ -72,7 +71,7 @@ uidNumber:
             - $last-name
     backends:
         ldap: uidNumber
-        ad: UIDNumber
+#        ad: UIDNumber
 gidNumber:
     description: "Group ID Number of the user"
     display_name: "GID Number"
@@ -81,7 +80,7 @@ gidNumber:
     default: 10000
     backends:
         ldap: gidNumber
-        ad: GIDNumber
+#        ad: GIDNumber
 shell:
     description: "Shell of the user"
     display_name: "Shell"
@@ -93,8 +92,8 @@ shell:
         - /bin/zsh
         - /bin/sh
     backends:
-        ldap: shell
+        ldap: loginShell
-        ad: SHELL
+#        ad: LOGINSHEL
 home:
     description: "Home user path"
     display_name: "Home"
@@ -107,9 +106,8 @@ home:
             - $last-name
             - /home/
     backends:
-        ldap: home
+        ldap: homeDirectory
-        ad: Home
+#        ad: HOMEDIRECTORY
-
 password:
     description: "Password of the user"
     display_name: "Password"
@@ -118,12 +116,4 @@ password:
     type: password
     backends:
         ldap: userPassword
-        ad: userPassword
+#        ad: PASSWORD
-logscript:
-    description: "Windows login script"
-    display_name: "Login script"
-    weight: 100
-    type: fix
-    value: login1.bat
-    backends:
-        ad: logonScript

conf/ldapcherry.ini

@@ -66,47 +66,54 @@ roles.file = '/etc/ldapcherry/roles.yml'
 
 [backends]
 
+#####################################
+#   configuration of ldap backend   #
+#####################################
+
 # name of the module
 ldap.module = 'ldapcherry.backend.backendLdap'
 
 # uri of the ldap directory
-ldap.uri = 'ldaps://ldap.ldapcherry.org'
+ldap.uri = 'ldap://ldap.ldapcherry.org'
 # ca to use for ssl/tls connexion
-ldap.ca = '/etc/dnscherry/TEST-cacert.pem'
+#ldap.ca = '/etc/dnscherry/TEST-cacert.pem'
 # use start tls
-ldap.starttls = 'off'
+#ldap.starttls = 'off'
 # check server certificate (for tls)
-ldap.checkcert = 'off'
+#ldap.checkcert = 'off'
 # bind dn to the ldap
-ldap.binddn = 'cn=ldapcherry,dc=example,dc=org'
+ldap.binddn = 'cn=dnscherry,dc=example,dc=org'
 # password of the bind dn
 ldap.password = 'password'
 # timeout of ldap connexion (in second)
 ldap.timeout = 1
 
 # groups dn
-ldap.groupdn = 'ou=groups,dc=example,dc=org'
+ldap.groupdn = 'ou=group,dc=example,dc=org'
 # users dn
 ldap.userdn = 'ou=people,dc=example,dc=org'
 # ldapsearch filter to get a user
 ldap.user_filter_tmpl = '(uid=%(username)s)'
 # ldapsearch filter to get groups of a user
-ldap.group_filter_tmpl = '(member=%(username)s)'
+ldap.group_filter_tmpl = '(member=uid=%(username)s,ou=People,dc=example,dc=org)'
 # filter to search users
 ldap.search_filter_tmpl = '(|(uid=%(searchstring)s*)(sn=%(searchstring)s*))'
 
 # ldap group attributes and how to fill them
-ldap.group_attr.uniqMember = "%(dn)s"
+ldap.group_attr.member = "%(dn)s"
-ldap.group_attr.memberUid = "%(uid)s"
+#ldap.group_attr.memberUid = "%(uid)s"
 # object classes of a user entry
-ldap.objectclasses = 'top, person, organizationalPerson, user'
+ldap.objectclasses = 'top, person, posixAccount, inetOrgPerson'
 # dn entry attribute for an ldap user
 ldap.dn_user_attr = 'uid'
 
-
+#####################################
-ad.module = 'ldapcherry.backend.backendSamba4'
+#   configuration of ad backend     #
-ad.auth = 'Administrator'
+#####################################
-ad.password = 'password'
+# 
+#ad.module = 'ldapcherry.backend.backendSamba4'
+#ad.auth = 'Administrator'
+#ad.password = 'password'
 
 # authentification parameters
 [auth]
@@ -128,4 +135,4 @@ templates.dir = '/usr/share/ldapcherry/templates/'
 
 [/static]
 tools.staticdir.on = True
-tools.staticdir.dir = '/usr/share/ldapcherry/static/'
+tools.staticdir.dir = '/home/kakwa/Geek/GitHub/ldapcherry/resources/static/'

conf/roles.yml

@@ -3,14 +3,14 @@ admin-lv3:
     description: Super administrators of the system
     backends_groups:
         ldap:
-            - cn=dns admins,ou=group,dc=example,dc=com
+            - cn=dns admins,ou=Group,dc=example,dc=org
-            - cn=nagios admins,ou=group,dc=example,dc=com
+            - cn=nagios admins,ou=Group,dc=example,dc=org
-            - cn=puppet admins,ou=group,dc=example,dc=com
+            - cn=puppet admins,ou=Group,dc=example,dc=org
-            - cn=users,ou=group,dc=example,dc=com
+            - cn=users,ou=Group,dc=example,dc=org
-        ad:
+#        ad:
-            - Domain Users
+#            - Administrators
-            - Administrators
+#            - Domain Controllers
-            - Domain Controllers 
+#            - Domain Users
 
 admin-lv2:
     display_name: Administrators Level 2
@@ -18,26 +18,25 @@ admin-lv2:
     LC_admins: True
     backends_groups:
         ldap:
-            - cn=nagios admins,ou=group,dc=example,dc=com
+            - cn=nagios admins,ou=Group,dc=example,dc=org
-            - cn=users,ou=group,dc=example,dc=com
+            - cn=users,ou=Group,dc=example,dc=org
-        ad:
+#        ad:
-            - Domain Users
+#            - Domain Users
+#            - Domain Controllers
 
 developpers:
     display_name: Developpers
     description: Developpers of the system
     backends_groups:
         ldap:
-            - cn=developpers,ou=group,dc=example,dc=com
+            - cn=developpers,ou=Group,dc=example,dc=org
-            - cn=users,ou=group,dc=example,dc=com
+            - cn=users,ou=Group,dc=example,dc=org
-        ad:
-            - Domain Users
 
 users:
     display_name: Simple Users
     description: Basic users of the system
     backends_groups:
         ldap:
-            - cn=users,ou=group,dc=example,dc=com
+            - cn=users,ou=Group,dc=example,dc=org
-        ad:
+#        ad:
-            - Domain Users
+#            - Domain Users