22 lines
590 B
YAML
22 lines
590 B
YAML
# Authentication stuff
|
|
|
|
password_config:
|
|
policy:
|
|
enabled: only_for_reauth
|
|
localdb_enabled: false
|
|
|
|
password_providers:
|
|
- module: "ldap_auth_provider.LdapAuthProvider"
|
|
config:
|
|
enabled: true
|
|
uri: "ldap://ldap.example.com"
|
|
start_tls: true
|
|
mode: "search"
|
|
base: "ou=users,o=Example,dc=example,dc=eu"
|
|
attributes:
|
|
uid: "uid"
|
|
mail: "mail"
|
|
name: "cn"
|
|
filter: "(&(objectClass=posixAccount)(accountStatus=active))"
|
|
bind_dn: "cn=matrix,ou=service,dc=example,dc=com"
|
|
bind_password: "<very secure password>"
|