|
|
You can configure MyPads for using LDAP authentication.
|
|
|
For that, add a `ep_mypads` section, containing a `ldap` section, in Etherpad's `settings.json` file:
|
|
|
You can configure MyPads for using LDAP authentication. For that, go to MyPads' admin interface and choose "LDAP" as authentication method.
|
|
|
|
|
|
Beside `properties` and `defaultLang`, all the settings are [simple-cas-interface](https://github.com/jsumners/simple-cas-interface/blob/HEAD/api.md#CASParameters) (the module used for the CAS authentication) settings.
|
|
|
|
|
|
`properties` is mandatory: it's used to bind LDAP attributes to MyPads users informations.
|
|
|
|
|
|
Valid LDAP parameters:
|
|
|
|
|
|
```
|
|
|
"ep_mypads": {
|
|
|
"ldap": {
|
|
|
// Your LDAP URL
|
|
|
"url": "ldaps://ldap.example.org",
|
|
|
// The LDAP user to bind with
|
|
|
"bindDN": "uid=ldap,ou=users,dc=example,dc=org",
|
|
|
// His password
|
|
|
"bindCredentials": "S3cr3t",
|
|
|
// Where to search your users
|
|
|
"searchBase": "ou=users,dc=example,dc=org",
|
|
|
// A LDAP filter ({{username}} is replaced by user's login)
|
|
|
"searchFilter": "(uid={{username}})",
|
|
|
// Uncomment this if you have a non-trusted (self-signed for example)
|
|
|
// certificate on your LDAP
|
|
|
/*"tlsOptions": {
|
|
|
"rejectUnauthorized": false
|
|
|
},*/
|
|
|
// LDAP properties mapping for MyPads
|
|
|
"properties": {
|
|
|
// Which LDAP property will be used as user's login?
|
|
|
"login": "uid",
|
|
|
// as user's email
|
|
|
"email": "mail",
|
|
|
// as user's firstname
|
|
|
"firstname": "givenName",
|
|
|
// as users's lastname
|
|
|
"lastname": "sn"
|
|
|
},
|
|
|
// Default langage for LDAP created users
|
|
|
"defaultLang": "fr"
|
|
|
}
|
|
|
{
|
|
|
// Your LDAP URL
|
|
|
"url": "ldaps://ldap.example.org",
|
|
|
// The LDAP user to bind with
|
|
|
"bindDN": "uid=ldap,ou=users,dc=example,dc=org",
|
|
|
// His password
|
|
|
"bindCredentials": "S3cr3t",
|
|
|
// Where to search your users
|
|
|
"searchBase": "ou=users,dc=example,dc=org",
|
|
|
// A LDAP filter ({{username}} is replaced by user's login)
|
|
|
"searchFilter": "(uid={{username}})",
|
|
|
// Uncomment this if you have a non-trusted (self-signed for example)
|
|
|
// certificate on your LDAP
|
|
|
/*"tlsOptions": {
|
|
|
"rejectUnauthorized": false
|
|
|
},*/
|
|
|
// LDAP properties mapping for MyPads
|
|
|
"properties": {
|
|
|
// Which LDAP property will be used as user's login?
|
|
|
"login": "uid",
|
|
|
// as user's email
|
|
|
"email": "mail",
|
|
|
// as user's firstname
|
|
|
"firstname": "givenName",
|
|
|
// as users's lastname
|
|
|
"lastname": "sn"
|
|
|
},
|
|
|
// Default langage for LDAP created users
|
|
|
"defaultLang": "fr"
|
|
|
}
|
|
|
```
|
|
|
|
|
|
Beside `properties` and `defaultLang`, all the settings in the `ldap` section are `ldapauth-fork` (the module used for the LDAP authentication) settings.
|
|
|
Beside `properties` and `defaultLang`, all the settings in the configuration are `ldapauth-fork` (the module used for the LDAP authentication) settings.
|
|
|
You can add other settings to it, just go on <https://www.npmjs.com/package/ldapauth-fork#ldapauth-config-options> to see which.
|
|
|
|
|
|
**NB** When using the LDAP authentication, registration of new accounts is disabled. |
|
|
\ No newline at end of file |