Andreas/wekan
1
0
Fork 0
mirror of https://github.com/wekan/wekan.git synced 2025-09-22 01:50:48 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 5

LDAP AD Simple Auth: Added settings for all Wekan Standalone (non-Sandstorm) platforms.

Browse source 
Thanks to xet7 !
This commit is contained in:
Lauri Ojansivu 2021-07-24 19:20:47 +03:00
parent c0d1ed714e
commit fe40f35d6d
8 changed files with 243 additions and 45 deletions
Download patch file Download diff file Expand all files Collapse all files

48
start-wekan.bat
View file

@ -190,10 +190,45 @@ REM # LDAP_HOST : The host server for the LDAP server
REM # example : LDAP_HOST=localhost
REM SET LDAP_HOST=
REM #-----------------------------------------------------------------
REM # ==== LDAP AD Simple Auth ====
REM # Set to true, if you want to connect with Active Directory by Simple Authentication.
REM # When using AD Simple Auth, LDAP_BASEDN is not needed.
REM SET LDAP_AD_SIMPLE_AUTH=true
REM #-----------------------------------------------------------------
REM # === LDAP User Authentication ===
REM #
REM # a) Option to login to the LDAP server with the user's own username and password, instead of
REM # an administrator key. Default: false (use administrator key).
REM #
REM # b) When using AD Simple Auth, set to true, when login user is used for binding,
REM # and LDAP_BASEDN is not needed.
REM #
REM # Example:
REM SET LDAP_USER_AUTHENTICATION=true
REM # Which field is used to find the user for the user authentication. Default: uid.
REM SET LDAP_USER_AUTHENTICATION_FIELD=uid
REM # === LDAP Default Domain ===
REM #
REM # a) In case AD SimpleAuth is configured, the default domain is appended to the given
REM # loginname for creating the correct username for the bind request to AD.
REM #
REM # b) The default domain of the ldap it is used to create email if the field is not map
REM # correctly with the LDAP_SYNC_USER_DATA_FIELDMAP
REM #
REM # Example :
REM SET LDAP_DEFAULT_DOMAIN=mydomain.com
REM #-----------------------------------------------------------------
REM # ==== LDAP BASEDN Auth ====
REM # LDAP_BASEDN : The base DN for the LDAP Tree
REM # example : LDAP_BASEDN=ou=user,dc=example,dc=org
REM SET LDAP_BASEDN=
REM #-----------------------------------------------------------------
REM # LDAP_LOGIN_FALLBACK : Fallback on the default authentication method
REM # example : LDAP_LOGIN_FALLBACK=true
REM SET LDAP_LOGIN_FALLBACK=false
@ -265,12 +300,6 @@ REM # LDAP_REJECT_UNAUTHORIZED : Reject Unauthorized Certificate
REM # example : LDAP_REJECT_UNAUTHORIZED=true
REM SET LDAP_REJECT_UNAUTHORIZED=false
REM # Option to login to the LDAP server with the user's own username and password, instead of an administrator key. Default: false (use administrator key).
REM SET LDAP_USER_AUTHENTICATION=true
REM # Which field is used to find the user for the user authentication. Default: uid.
REM SET LDAP_USER_AUTHENTICATION_FIELD=uid
REM # LDAP_USER_SEARCH_FILTER : Optional extra LDAP filters. Don't forget the outmost enclosing parentheses if needed
REM # example : LDAP_USER_SEARCH_FILTER=
REM SET LDAP_USER_SEARCH_FILTER=
@ -355,14 +384,13 @@ REM # LDAP_SYNC_USER_DATA_FIELDMAP :
REM # example : LDAP_SYNC_USER_DATA_FIELDMAP={"cn":"name", "mail":"email"}
REM SET LDAP_SYNC_USER_DATA_FIELDMAP=
REM # The default domain of the ldap it is used to create email if the field is not map correctly
REM # with the LDAP_SYNC_USER_DATA_FIELDMAP is defined in setting LDAP_DEFAULT_DOMAIN above.
REM # LDAP_SYNC_GROUP_ROLES :
REM # example :
REM # SET LDAP_SYNC_GROUP_ROLES=
REM # LDAP_DEFAULT_DOMAIN : The default domain of the ldap it is used to create email if the field is not map correctly with the LDAP_SYNC_USER_DATA_FIELDMAP
REM # example :
REM SET LDAP_DEFAULT_DOMAIN=
REM # Enable/Disable syncing of admin status based on ldap groups:
REM SET LDAP_SYNC_ADMIN_STATUS=true