Unterschiede

Hier werden die Unterschiede zwischen zwei Versionen angezeigt.

--- benno_mailarchiv [2018/10/15 19:55] – matthias
+++ benno_mailarchiv [2019/11/25 18:33] (aktuell) – matthias
@@ Zeile 34: / Zeile 34: @@
 ===== LDAP Authentisierung =====
+/etc/benno-web/ldapauth.conf
+<code>
+#
+# LDAP Authentication configuration file
+#
+# This file must be readable by the user of the web server
+#
-Die Datei /etc/benno-web/benno.conf muss um folgende Zeile eränzt werden
+# LDAP host
+#
+# <hostname>:<port>
+#
+# Univention UCS + Samba4: <hostname>:7389
+#
+host = ucs.domain.lan:7389
+# LDAP base dn
+#
+# Base dn of the ldap directory, the bind dn will be determined by a search
+#
+# request the user uid
+#
+basedn = dc=domain,dc=lan
+# User id attribute
+#
+# The attribute which holds the user id for authentication
+#
+# Windows AD: userattr = sAMAccountName
+#userattr = uid
+# user rdn
+#
+# Authentication will be performed as: $userattr=USERLOGIN,$usersuffix
+#
+# If disabled, a LDAP search operation will be performed to detect the user dn
+usersuffix = cn=users,dc=domain,dc=lan
+# User objectclas
+#
+# Objectclass of user object
+#
+# Windows AD: objectclass = user
+objectclass = posixAccount
+# Encrypt LDAP connection with TLS if set to "true"
+tls = true
+# DN to bind for search requests
+#
+# Dn of an user with permissions to search at the ldap tree.
+# Enable if anonymous search is not permitted!
+#
+# Windows AD: binddn = <username>@<windows-domain>
+#binddn =
+# Password of the admin user
+#
+#password =
+## User is allowed to access his own email adresses and
+## addtional adresses
+# Email address attribute
+# Univention UCS: mailPrimaryAddress
+email = mailPrimaryAddress
+# Email alias attribute
+# Windows AD: proxyAddress | proxyAddresses
+# Univention UCS: mailAlternativeAddress
+alias = mailAlternativeAddress,bennoEmailAddress
+# Allow access to additional email addresses
+addemail = bennoEmailAddress
+# Benno role attribute
+role = bennoRole
+# Benno container name attribute
+container = bennoContainer
+# Default container (if containerattr not set in LDAP)
+default_container = BennoContainer
+# Username who will always assigned the admin role
+adminuser = Administrator
+# remove domain from username during authentication if set to "true"
+#remove_domainsuffix = true
+</code>
+LDAP-Modul aktivieren:
+  cd /etc/benno-web/auth.d/
+  ln -s /usr/lib/benno-web/benno_ldapauth .
+Die Datei /etc/benno-web/benno.conf muss um folgende Zeile ergänzt werden
   EXTERNAL_AUTH = /usr/sbin/benno_auth.d