diff options
| author | Freya Murphy <freya@freyacat.org> | 2024-05-30 13:05:46 -0400 |
|---|---|---|
| committer | Freya Murphy <freya@freyacat.org> | 2024-05-30 13:05:46 -0400 |
| commit | 39bcb09a367251bed7cfb445f546252547058e66 (patch) | |
| tree | a1bb8e2c137e16202836ea6df8d7004b5e48e8a6 /docker.env | |
| parent | am dumb (diff) | |
| download | ldap_forwardauth-39bcb09a367251bed7cfb445f546252547058e66.tar.gz ldap_forwardauth-39bcb09a367251bed7cfb445f546252547058e66.tar.bz2 ldap_forwardauth-39bcb09a367251bed7cfb445f546252547058e66.zip | |
many changes
Diffstat (limited to 'docker.env')
| -rw-r--r-- | docker.env | 37 |
1 files changed, 37 insertions, 0 deletions
diff --git a/docker.env b/docker.env new file mode 100644 index 0000000..c14d431 --- /dev/null +++ b/docker.env @@ -0,0 +1,37 @@ + +# +# ldap_forwardauth config file +# + +# == LDAP SETTINGS == +# Enter the auth information for the ldap bind dn auth +LDAP_URL="ldap://127.0.0.1" +LDAP_BIND_DN="cn=example,ou=users,dc=example,dc=com" +LDAP_BIND_PASSWORD="securePassword" +LDAP_BASE_DN="ou=users,dc=example,dc=com" +LDAP_FILTER="(&)" +LDAP_UID="cn" + +# == LDAP MATCHERS == +# Matchers allow the program to figure out what fields +# contain what type of data +LDAP_USERNAME_MATCHER="uid" +LDAP_EMAIL_MATCHER="mail" +LDAP_FIRST_NAME_MATCHER="givenname" +LDAP_LAST_NAME_MATCHER="sn" + +# == FORWARD AUTH HEADER NAMES == +# Specify the names for the forward auth headers +# ldap_forwardauth should output +HTTP_USERNAME_HEADER=X-Webauth-Username +HTTP_EMAIL_HEADER=X-Webauth-Email +HTTP_FIRST_NAME_HEADER=X-Webauth-First-Name +HTTP_LAST_NAME_HEADER=X-Webauth-Last-Name + +# == HOST INFORMATION == +# The http host is the domain and port ldap_forwardauth is hosted at +# Cookie domain is the superset of domains that ldap_forwardauth can auth to +# Note: HTTPH_HOST must must be the same or a subdomain to COOKIE_DOMAIN +HTTP_HOST=auth.example.com +COOKIE_DOMAIN=example.com +COOKIE_NAME=X-Webauth-Token |