mirror of
https://github.com/glauth/glauth.git
synced 2026-10-25 21:49:50 +00:00
Chris F Ravenscroft
4cf38893ac
* Introducing goconvey testing and refactoring of config and plugin backends. * gofmt, oops * Refactored re-insertion of requested attributes
83 lines
2.3 KiB
INI
83 lines
2.3 KiB
INI
#################
|
|
# glauth.conf
|
|
|
|
#################
|
|
# General configuration.
|
|
debug = true
|
|
# syslog = true
|
|
#
|
|
# Enable hot-reload of configuration on changes
|
|
# - does NOT work [ldap], [ldaps], [backend] or [api] sections
|
|
# watchconfig = true
|
|
|
|
#################
|
|
# yubikeyclientid = "yubi-api-clientid"
|
|
# yubikeysecret = "yubi-api-secret"
|
|
|
|
#################
|
|
# Server configuration.
|
|
#
|
|
# This is the old server-config format
|
|
# - will still work, but please use new format, shown below
|
|
#
|
|
# [frontend]
|
|
# listen = "localhost:8484"
|
|
# tls = false
|
|
# cert ="certs/server.crt"
|
|
# key = "certs/server.key"
|
|
|
|
# This ([ldap] and [ldaps]) is the new server-config format
|
|
[ldap]
|
|
enabled = true
|
|
listen = "0.0.0.0:3893"
|
|
|
|
[ldaps]
|
|
enabled = false
|
|
listen = "0.0.0.0:3894"
|
|
cert = "certs/server.crt"
|
|
key = "certs/server.key"
|
|
|
|
#################
|
|
# The backend section controls the data store.
|
|
[backend]
|
|
datastore = "plugin"
|
|
# If "plugin," uncomment the line below
|
|
plugin = "bin/sqlite.so"
|
|
pluginhandler = "NewSQLiteHandler"
|
|
baseDN = "dc=glauth,dc=com"
|
|
|
|
# // MySQL //
|
|
# Uncomment this line to configure your MySQL database connection string:
|
|
# database = "glauth:glauth@tcp(127.0.0.1:3306)/glauth"
|
|
# Creating database:
|
|
# create database glauth identified;
|
|
# grant all on glauth.* to glauth@localhost identified by 'glauth';
|
|
# // Postgres //
|
|
# Uncomment this line to configure your Postgres database connection string:
|
|
# database = "host=127.0.0.1 port=5432 dbname=glauth user=glauth password=glauth sslmode=disable"
|
|
# Creating database:
|
|
# CREATE DATABASE <dbname>;
|
|
# CREATE USER <username> WITH PASSWORD '<userpassword>'
|
|
# GRANT ALL PRIVILEGES ON DATABASE <dbname> to <username>;
|
|
# // SQLite //
|
|
# Uncomment this line to configure your SQLite database connection string:
|
|
database = "gl.db"
|
|
|
|
## Configure dn format to use structures like
|
|
## "uid=serviceuser,cn=svcaccts,$BASEDN" instead of "cn=serviceuser,ou=svcaccts,$BASEDN"
|
|
## to help ease migrations from other LDAP systems
|
|
# nameformat = "uid"
|
|
# groupformat = "cn"
|
|
|
|
## Configure ssh-key attribute name, default is 'sshPublicKey'
|
|
# sshkeyattr = "ipaSshPubKey"
|
|
|
|
#################
|
|
# Enable and configure the optional REST API here.
|
|
[api]
|
|
enabled = true
|
|
tls = false # enable TLS for production!!
|
|
listen = "0.0.0.0:5555"
|
|
cert = "cert.pem"
|
|
key = "key.pem"
|