|
|
@ -16,49 +16,49 @@ retrieved and passed to the Gogs login infrastructure. |
|
|
|
To use this module, add an LDAP authentication source via the Authentications |
|
|
|
To use this module, add an LDAP authentication source via the Authentications |
|
|
|
section in the admin panel. The fields should be set as follows: |
|
|
|
section in the admin panel. The fields should be set as follows: |
|
|
|
|
|
|
|
|
|
|
|
Authorization Name (required) |
|
|
|
* Authorization Name **(required)** |
|
|
|
A name to assign to the new method of authorization. |
|
|
|
* A name to assign to the new method of authorization. |
|
|
|
|
|
|
|
|
|
|
|
Host (required) |
|
|
|
* Host **(required)** |
|
|
|
The address where the LDAP server can be reached. |
|
|
|
* The address where the LDAP server can be reached. |
|
|
|
Example: mydomain.com |
|
|
|
* Example: mydomain.com |
|
|
|
|
|
|
|
|
|
|
|
Port (required) |
|
|
|
* Port **(required)** |
|
|
|
The port to use when connecting to the server. |
|
|
|
* The port to use when connecting to the server. |
|
|
|
Example: 636 |
|
|
|
* Example: 636 |
|
|
|
|
|
|
|
|
|
|
|
Enable TLS Encryption (optional) |
|
|
|
* Enable TLS Encryption (optional) |
|
|
|
Whether to use TLS when connecting to the LDAP server. |
|
|
|
* Whether to use TLS when connecting to the LDAP server. |
|
|
|
|
|
|
|
|
|
|
|
Bind DN (optional) |
|
|
|
* Bind DN (optional) |
|
|
|
The DN to bind to the LDAP server with when searching for the user. |
|
|
|
* The DN to bind to the LDAP server with when searching for the user. |
|
|
|
This may be left blank to perform an anonymous search. |
|
|
|
This may be left blank to perform an anonymous search. |
|
|
|
Example: cn=Search,dc=mydomain,dc=com |
|
|
|
* Example: cn=Search,dc=mydomain,dc=com |
|
|
|
|
|
|
|
|
|
|
|
Bind Password (optional) |
|
|
|
* Bind Password (optional) |
|
|
|
The password for the Bind DN specified above, if any. |
|
|
|
* The password for the Bind DN specified above, if any. |
|
|
|
|
|
|
|
|
|
|
|
User Search Base (required) |
|
|
|
* User Search Base **(required)** |
|
|
|
The LDAP base at which user accounts will be searched for. |
|
|
|
* The LDAP base at which user accounts will be searched for. |
|
|
|
Example: ou=Users,dc=mydomain,dc=com |
|
|
|
* Example: ou=Users,dc=mydomain,dc=com |
|
|
|
|
|
|
|
|
|
|
|
User Filter (required) |
|
|
|
* User Filter **(required)** |
|
|
|
An LDAP filter declaring how to find the user record that is attempting |
|
|
|
* An LDAP filter declaring how to find the user record that is attempting |
|
|
|
to authenticate. The '%s' matching parameter will be substituted with |
|
|
|
to authenticate. The '%s' matching parameter will be substituted with |
|
|
|
the user's username. |
|
|
|
the user's username. |
|
|
|
Example: (&(objectClass=posixAccount)(uid=%s)) |
|
|
|
* Example: (&(objectClass=posixAccount)(uid=%s)) |
|
|
|
|
|
|
|
|
|
|
|
First name attribute (optional) |
|
|
|
* First name attribute (optional) |
|
|
|
The attribute of the user's LDAP record containing the user's first |
|
|
|
* The attribute of the user's LDAP record containing the user's first |
|
|
|
name. This will be used to populate their account information. |
|
|
|
name. This will be used to populate their account information. |
|
|
|
Example: givenName |
|
|
|
* Example: givenName |
|
|
|
|
|
|
|
|
|
|
|
Surname name attribute (optional) |
|
|
|
* Surname name attribute (optional) |
|
|
|
The attribute of the user's LDAP record containing the user's surname |
|
|
|
*The attribute of the user's LDAP record containing the user's surname |
|
|
|
This will be used to populate their account information. |
|
|
|
This will be used to populate their account information. |
|
|
|
Example: sn |
|
|
|
* Example: sn |
|
|
|
|
|
|
|
|
|
|
|
E-mail attribute (required) |
|
|
|
* E-mail attribute (required) |
|
|
|
The attribute of the user's LDAP record containing the user's email |
|
|
|
The attribute of the user's LDAP record containing the user's email |
|
|
|
address. This will be used to populate their account information. |
|
|
|
address. This will be used to populate their account information. |
|
|
|
Example: mail |
|
|
|
* Example: mail |
|
|
|