ePAS-ISTI
/
ansible-role-epasmed
3
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Merge pull request 'epas: fix the authenticated bind behaviour' (#11) from adellam/ansible-role-epas:master into master

This commit is contained in:
Andrea Dell'Amico 2020-11-26 19:25:47 +01:00
parent b04344b1bf b2e1fc3ad9
commit 853f05b91e
2 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
defaults/main.yml
View File

@ -49,7 +49,8 @@ epas_ldap_login_return_uri: '/.'
epas_ldap_eppn_attribute_name: 'eduPersonPrincipalName' epas_ldap_eppn_attribute_name: 'eduPersonPrincipalName'
epas_ldap_starttls_enabled: 'false' epas_ldap_starttls_enabled: 'false'
epas_ldap_authenticated_bind: False epas_ldap_authenticated_bind: False
epas_ldap_bind_principal: 'cn=readuser,ou=People,o=example,c=org' epas_ldap_bind_dn: 'cn=readuser,ou=People,o=example,c=org'
#epas_ldap_bind_credentials: 'use a vault file' #epas_ldap_bind_credentials: 'use a vault file'
epas_ldap_authenticate_user_search_dn: 'o=example,c=org'
epas_log_level: 'INFO' epas_log_level: 'INFO'
epas_log_appenders: 'stderr' epas_log_appenders: 'stderr'

5
templates/epas-docker-compose.yml.j2
View File

@ -67,8 +67,9 @@ services:
- LDAP_LOGIN_RETURN={{ epas_ldap_login_return_uri }} # default: /. Indirizzo relativo di reindirizzamento dopo il login LDAP. - LDAP_LOGIN_RETURN={{ epas_ldap_login_return_uri }} # default: /. Indirizzo relativo di reindirizzamento dopo il login LDAP.
- LDAP_EPPN_ATTRIBUTE_NAME={{ epas_ldap_eppn_attribute_name }} # default: eduPersonPrincipalName. Campo LDAP utilizzato per il mapping con il campo eppn presente in ePAS. - LDAP_EPPN_ATTRIBUTE_NAME={{ epas_ldap_eppn_attribute_name }} # default: eduPersonPrincipalName. Campo LDAP utilizzato per il mapping con il campo eppn presente in ePAS.
{% if epas_ldap_authenticated_bind %} {% if epas_ldap_authenticated_bind %}
- LDAP_ADMIN_PRINCIPAL={{ epas_ldap_bind_principal }} - LDAP_BIND_DN={{ epas_ldap_bind_dn }}
- LDAP_ADMIN_CREDENTIALS={{ epas_ldap_bind_credentials }} - LDAP_BIND_CREDENTIALS={{ epas_ldap_bind_credentials }}
- LDAP_AUTHENTICATE_USER_SEARCH_DN={{ epas_ldap_authenticate_user_search_dn }}
{% endif %} {% endif %}
#### Invio Segnalazioni via email #### Invio Segnalazioni via email
#- REPORT_TO=${REPORT_TO} # default: epas@iit.cnr.it #- REPORT_TO=${REPORT_TO} # default: epas@iit.cnr.it