mirror of
https://github.com/glauth/glauth.git
synced 2026-10-26 06:00:13 +00:00
Chris F Ravenscroft
2eb2215ae4
This commit actually covers a few items. In future commits, I will keep features distinct. This is only happening this time around due to how long it took to merge this branch. Covered: - Database plugins (at this time: SQLite, MySQL, Postgres) - Backends acting as middleware: added the [[Backends]] configuration directive while retaining backward compatibility with [Backend] - Schema introspection (root DSE query with base scope) - When proxying, insert queried attribute back in upstream response, if absent, so that the LDAP library does not filter out all entries - When chaining backends, any backend can be used to inject OTP value in password, before reaching a non-OTP-aware backend (currently guarded by a True statement in case we find an issue (I did thoroughly test but you never know)) - Handling of special "1.1" attributes filter meaning "I do not want attributes" (RFC 4511, 4.5.1.8) - Support for "want types only" queries, even when proxying
46 lines
857 B
INI
46 lines
857 B
INI
#################
|
|
# glauth.conf
|
|
|
|
#################
|
|
# General configuration.
|
|
#debug = true
|
|
syslog = true
|
|
|
|
#################
|
|
# Server configuration.
|
|
[ldap]
|
|
enabled = true
|
|
listen = "0.0.0.0:389"
|
|
|
|
[ldaps]
|
|
enabled = true
|
|
listen = "0.0.0.0:636"
|
|
cert = "glauth.crt"
|
|
key = "glauth.key"
|
|
|
|
#################
|
|
# The backend section controls the data store.
|
|
[backend]
|
|
datastore = "ldap"
|
|
servers = [ "ldaps://server1:636", "ldaps://server2:636" ]
|
|
|
|
# Ignore SSL certificate errors when connecting to backend LDAP servers.
|
|
#insecure = true
|
|
|
|
[helper]
|
|
enabled = true
|
|
datastore = "plugin"
|
|
plugin = "bin/sqlite.so"
|
|
pluginhandler = "NewSQLiteHandler"
|
|
database = "glh.db"
|
|
|
|
#################
|
|
# Enable and configure the optional REST API here.
|
|
[api]
|
|
enabled = true
|
|
tls = true
|
|
listen = "localhost:5555"
|
|
cert = "glauth.crt"
|
|
key = "glauth.key"
|
|
|