|
|
@ -33,22 +33,24 @@ make install |
|
|
|
Define list of your LDAP servers with required user/group requirements: |
|
|
|
Define list of your LDAP servers with required user/group requirements: |
|
|
|
|
|
|
|
|
|
|
|
```bash |
|
|
|
```bash |
|
|
|
ldap_server test1 { |
|
|
|
http { |
|
|
|
url ldap://192.168.0.1:3268/DC=test,DC=local?sAMAccountName?sub?(objectClass=person); |
|
|
|
ldap_server test1 { |
|
|
|
binddn "TEST\\LDAPUSER"; |
|
|
|
url ldap://192.168.0.1:3268/DC=test,DC=local?sAMAccountName?sub?(objectClass=person); |
|
|
|
binddn_passwd LDAPPASSWORD; |
|
|
|
binddn "TEST\\LDAPUSER"; |
|
|
|
group_attribute uniquemember; |
|
|
|
binddn_passwd LDAPPASSWORD; |
|
|
|
group_attribute_is_dn on; |
|
|
|
group_attribute uniquemember; |
|
|
|
require valid_user; |
|
|
|
group_attribute_is_dn on; |
|
|
|
} |
|
|
|
require valid_user; |
|
|
|
|
|
|
|
} |
|
|
|
ldap_server test2 { |
|
|
|
|
|
|
|
url ldap://192.168.0.2:3268/DC=test,DC=local?sAMAccountName?sub?(objectClass=person); |
|
|
|
ldap_server test2 { |
|
|
|
binddn "TEST\\LDAPUSER"; |
|
|
|
url ldap://192.168.0.2:3268/DC=test,DC=local?sAMAccountName?sub?(objectClass=person); |
|
|
|
binddn_passwd LDAPPASSWORD; |
|
|
|
binddn "TEST\\LDAPUSER"; |
|
|
|
group_attribute uniquemember; |
|
|
|
binddn_passwd LDAPPASSWORD; |
|
|
|
group_attribute_is_dn on; |
|
|
|
group_attribute uniquemember; |
|
|
|
require valid_user; |
|
|
|
group_attribute_is_dn on; |
|
|
|
|
|
|
|
require valid_user; |
|
|
|
|
|
|
|
} |
|
|
|
} |
|
|
|
} |
|
|
|
``` |
|
|
|
``` |
|
|
|
|
|
|
|
|
|
|
@ -67,5 +69,5 @@ And add required servers in correct order into your location/server directive: |
|
|
|
index index.html index.htm; |
|
|
|
index index.html index.htm; |
|
|
|
} |
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
} |
|
|
|
} |
|
|
|
``` |
|
|
|
``` |
|
|
|