mirror of
https://github.com/kakwa/ldapcherry
synced 2024-10-31 22:58:52 +01:00
d831b09293
* improve documentation for key: True flag in attributes.yml * improve documentation for the ldap filters and their templating * improve comment in the .ini file
228 lines
6.3 KiB
INI
228 lines
6.3 KiB
INI
# global parameters
|
|
[global]
|
|
|
|
# listing interface
|
|
server.socket_host = '127.0.0.1'
|
|
# port
|
|
server.socket_port = 8080
|
|
|
|
# it's also possible to run bound to a unix socket
|
|
#server.socket_file = '/tmp/lc.sock'
|
|
|
|
# number of threads
|
|
server.thread_pool = 8
|
|
#don't show traceback on error
|
|
request.show_tracebacks = False
|
|
|
|
# log configuration
|
|
# /!\ you can't have multiple log handlers
|
|
#####################################
|
|
# configuration to log in files #
|
|
#####################################
|
|
## logger 'file' for access log
|
|
#log.access_handler = 'file'
|
|
## logger syslog for error and ldapcherry log
|
|
#log.error_handler = 'file'
|
|
## access log file
|
|
#log.access_file = '/tmp/ldapcherry_access.log'
|
|
## error and ldapcherry log file
|
|
#log.error_file = '/tmp/ldapcherry_error.log'
|
|
|
|
#####################################
|
|
# configuration to log to stdout #
|
|
#####################################
|
|
## logger stdout for access log
|
|
#log.access_handler = 'stdout'
|
|
## logger stdout for error and ldapcherry log
|
|
#log.error_handler = 'stdout'
|
|
|
|
#####################################
|
|
# configuration to log in syslog #
|
|
#####################################
|
|
# logger syslog for access log
|
|
#log.access_handler = 'syslog'
|
|
## logger syslog for error and ldapcherry log
|
|
log.error_handler = 'syslog'
|
|
|
|
#####################################
|
|
# configuration to not log at all #
|
|
#####################################
|
|
# logger none for access log
|
|
log.access_handler = 'none'
|
|
# logger none for error and ldapcherry log
|
|
#log.error_handler = 'none'
|
|
|
|
# log level
|
|
log.level = 'info'
|
|
|
|
# session configuration
|
|
# activate session
|
|
tools.sessions.on = True
|
|
# session timeout
|
|
tools.sessions.timeout = 10
|
|
# file session storage(to use if multiple processes,
|
|
# default is in RAM and per process)
|
|
#tools.sessions.storage_type = "file"
|
|
# session
|
|
#tools.sessions.storage_path = "/var/lib/ldapcherry/sessions"
|
|
|
|
[attributes]
|
|
|
|
# file discribing form content
|
|
attributes.file = '/etc/ldapcherry/attributes.yml'
|
|
|
|
[roles]
|
|
|
|
# file listing roles
|
|
roles.file = '/etc/ldapcherry/roles.yml'
|
|
|
|
[backends]
|
|
|
|
#####################################
|
|
# configuration of ldap backend #
|
|
#####################################
|
|
|
|
# name of the module
|
|
ldap.module = 'ldapcherry.backend.backendLdap'
|
|
# display name of the ldap
|
|
ldap.display_name = 'My Ldap Directory'
|
|
|
|
# uri of the ldap directory
|
|
ldap.uri = 'ldap://ldap.ldapcherry.org'
|
|
# ca to use for ssl/tls connexion
|
|
#ldap.ca = '/etc/dnscherry/TEST-cacert.pem'
|
|
# use start tls
|
|
#ldap.starttls = 'off'
|
|
# check server certificate (for tls)
|
|
#ldap.checkcert = 'off'
|
|
# bind dn to the ldap
|
|
ldap.binddn = 'cn=dnscherry,dc=example,dc=org'
|
|
# password of the bind dn
|
|
ldap.password = 'password'
|
|
# timeout of ldap connexion (in second)
|
|
ldap.timeout = 1
|
|
|
|
# groups dn
|
|
ldap.groupdn = 'ou=group,dc=example,dc=org'
|
|
# users dn
|
|
ldap.userdn = 'ou=people,dc=example,dc=org'
|
|
|
|
# ldapsearch filter to get a specific user
|
|
# %(username)s is content of the attribute marked 'key: True' in the attributes.file conf
|
|
ldap.user_filter_tmpl = '(uid=%(username)s)'
|
|
# ldapsearch filter to get groups of a user
|
|
# %(username)s is content of the attribute marked 'key: True' in the attributes.file conf
|
|
ldap.group_filter_tmpl = '(member=uid=%(username)s,ou=People,dc=example,dc=org)'
|
|
# filter to search users
|
|
# %(searchstring)s is content passed through the search box
|
|
ldap.search_filter_tmpl = '(|(uid=%(searchstring)s*)(sn=%(searchstring)s*))'
|
|
|
|
# ldap group attributes and how to fill them
|
|
# 'member' is the name of the attribute
|
|
# for the template, any of the user's ldap attributes can be user
|
|
ldap.group_attr.member = "%(dn)s"
|
|
# same with memverUid and the uid user's attribute
|
|
#ldap.group_attr.memberUid = "%(uid)s"
|
|
|
|
# object classes of a user entry
|
|
ldap.objectclasses = 'top, person, posixAccount, inetOrgPerson'
|
|
# dn entry attribute for an ldap user
|
|
ldap.dn_user_attr = 'uid'
|
|
|
|
#####################################
|
|
# configuration of ad backend #
|
|
#####################################
|
|
|
|
## Name of the backend
|
|
#ad.module = 'ldapcherry.backend.backendAD'
|
|
## display name of the ldap
|
|
#ad.display_name = 'My Active Directory'
|
|
## ad domain
|
|
#ad.domain = 'dc.ldapcherry.org'
|
|
## ad login
|
|
#ad.login = 'administrator'
|
|
## ad password
|
|
#ad.password = 'qwertyP455'
|
|
## ad uri
|
|
#ad.uri = 'ldap://ldap.ldapcherry.org'
|
|
|
|
## ca to use for ssl/tls connexion
|
|
#ad.ca = '/etc/dnscherry/TEST-cacert.pem'
|
|
## use start tls
|
|
#ad.starttls = 'off'
|
|
## check server certificate (for tls)
|
|
#ad.checkcert = 'off'
|
|
|
|
#####################################
|
|
# configuration of demo backend #
|
|
#####################################
|
|
|
|
## Name of the backend
|
|
#demo.module = 'ldapcherry.backend.backendDemo'
|
|
## Display name of the Backend
|
|
#demo.display_name = 'Demo Backend'
|
|
## Groups of admin user
|
|
#demo.admin.groups = 'DnsAdmins'
|
|
## Groups of basic user
|
|
#demo.basic.groups = 'Test 2, Test 1'
|
|
## Password attribute name
|
|
#demo.pwd_attr = 'userPassword'
|
|
## Attribute to use for the search
|
|
#demo.search_attributes = 'cn, sn, givenName, uid'
|
|
## Login of default admin user
|
|
#demo.admin.user = 'admin'
|
|
## Password of default admin user
|
|
#demo.admin.password = 'admin'
|
|
## Login of default basic user
|
|
#demo.basic.user = 'user'
|
|
## Password of default basic user
|
|
#demo.basic.password = 'user'
|
|
|
|
[ppolicy]
|
|
|
|
# password policy module
|
|
ppolicy.module = 'ldapcherry.ppolicy.simple'
|
|
|
|
# parameters of the module
|
|
min_length = 8
|
|
min_upper = 1
|
|
min_digit = 1
|
|
|
|
# authentification parameters
|
|
[auth]
|
|
|
|
# Auth mode
|
|
# * and: user must authenticate on all backends
|
|
# * or: user must authenticate on one of the backend
|
|
# * none: disable authentification
|
|
# * custom: custom authentification module (need auth.module param)
|
|
auth.mode = 'or'
|
|
|
|
# custom auth module to load
|
|
#auth.module = 'ldapcherry.auth.modNone'
|
|
|
|
# resources parameters
|
|
[resources]
|
|
# templates directory
|
|
templates.dir = '/usr/share/ldapcherry/templates/'
|
|
|
|
[/static]
|
|
# enable serving static file through ldapcherry
|
|
# set to False if files served directly by an
|
|
# http server for better performance
|
|
tools.staticdir.on = True
|
|
# static resources directory (js, css, images...)
|
|
tools.staticdir.dir = '/usr/share/ldapcherry/static/'
|
|
|
|
## custom javascript files
|
|
#[/custom]
|
|
#
|
|
## enable serving static file through ldapcherry
|
|
## set to False if files served directly by an
|
|
## http server for better performance
|
|
#tools.staticdir.on = True
|
|
|
|
## path to directory containing js files
|
|
## use it to add custom auto-fill functions
|
|
#tools.staticdir.dir = '/etc/ldapcherry/custom_js/'
|