diff options
| author | Freya Murphy <freya@freyacat.org> | 2024-05-30 13:05:46 -0400 |
|---|---|---|
| committer | Freya Murphy <freya@freyacat.org> | 2024-05-30 13:05:46 -0400 |
| commit | 39bcb09a367251bed7cfb445f546252547058e66 (patch) | |
| tree | a1bb8e2c137e16202836ea6df8d7004b5e48e8a6 /README.md | |
| parent | am dumb (diff) | |
| download | ldap_forwardauth-39bcb09a367251bed7cfb445f546252547058e66.tar.gz ldap_forwardauth-39bcb09a367251bed7cfb445f546252547058e66.tar.bz2 ldap_forwardauth-39bcb09a367251bed7cfb445f546252547058e66.zip | |
many changes
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 21 |
1 files changed, 1 insertions, 20 deletions
@@ -4,26 +4,7 @@ LDAP Forward Auth is a forward auth service (shocking) that i made to use with t It allows a proxied login page to appear if a user tries to access restricted content while not logged in. -It uses LDAP for authentication, which can be configured in the conf/ldap/ldap.env file. - -``` -# the following is all the ldap credentials for a ldap bind dn auth setup -# this does not support ldap simple auth -LDAP_URL= -LDAP_BIND_DN= -LDAP_BIND_PASSWORD= -LDAP_BASE_DN= -LDAP_FILTER="(&)" -LDAP_UID="cn" - -# the host that the forward auth is hosted at -# if the user is not logged in they will be redirected here -HTTP_HOST=auth.example.com - -# the base domain for all websites that are being authed checked including the forward auth itself. -# they all need to have a common root domain otherwise the X-LDAP-Auth-Key cookie cannot be set. -COOKIE_DOMAIN=example.com -``` +It uses LDAP for authentication, which can be configured in the `docker.env` file. Once authenticated, sets the X-Webauth-User header, which can be used by applications to see who is logged in. |