ePAS-ISTI
/
ansible-role-epasmed
3
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Supporto a bind autenticato per ldap.

This commit is contained in:
Andrea Dell'Amico 2020-11-20 14:15:14 +01:00
parent 371067f3d5
commit 3142c1c058
2 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
defaults/main.yml
View File

@ -48,3 +48,7 @@ epas_ldap_base_dn: 'ou=People,dc=example,dc=org'
epas_ldap_login_return_uri: '/.'
epas_ldap_eppn_attribute_name: 'eduPersonPrincipalName'
epas_ldap_starttls_enabled: 'false'
epas_ldap_authenticated_bind: False
epas_ldap_bind_principal: 'cn=readuser,ou=People,o=example,c=org'
#epas_ldap_bind_credentials: 'use a vault file'

4
templates/epas-docker-compose.yml.j2
View File

@ -66,6 +66,10 @@ services:
- LDAP_DN_BASE={{ epas_ldap_base_dn }} # DN per la ricerca degli utenti su LDAP, per esempio ou=People,dc=iit,dc=cnr,dc=it
- LDAP_LOGIN_RETURN={{ epas_ldap_login_return_uri }} # default: /. Indirizzo relativo di reindirizzamento dopo il login LDAP.
- LDAP_EPPN_ATTRIBUTE_NAME={{ epas_ldap_eppn_attribute_name }} # default: eduPersonPrincipalName. Campo LDAP utilizzato per il mapping con il campo eppn presente in ePAS.
{% if epas_ldap_authenticated_bind %}
- LDAP_ADMIN_PRINCIPAL={{ epas_ldap_bind_principal }}
- LDAP_ADMIN_CREDENTIALS={{ epas_ldap_bind_credentials }}
{% endif %}
#### Invio Segnalazioni via email
#- REPORT_TO=${REPORT_TO} # default: epas@iit.cnr.it
#- REPORT_FROM=${REPORT_FROM} # default: segnalazioni@epas.tools.iit.cnr.it