Using LDAP as authentication backend (optional)

{"header":{"message":"LDAP: add brief section in the documentation","description":null,"timestamp":"2020-09-10T15:09:12Z","authors":[{"email":"andreas@rammhold.de","name":"Andreas Rammhold"}]},"hash":"BZ7R536TG57J2BQ46FCV4TBSQPFODY7VACT3KW5J2IYKGTYUMURQC","authors":[],"deps":{"hashes":[["BZ7R536TG57J2BQ46FCV4TBSQPFODY7VACT3KW5J2IYKGTYUMURQC","LDAP: add brief section in the documentation"],["AA",null],["RCKZG7CANDEQNOMY5CCDMWL6RMDGZOYJNKKONE77JEAM27VQ7T6QC","Document how to serve hydra behind reverse proxy (#423)"],["KBW3FDZ2PK7YCH3ICSHFWP22CWXYAXIPULP6LEN3S3K22UT4WSVQC","Merge remote branch 'remotes/origin/master'"]],"deps":["RCKZG7CANDEQNOMY5CCDMWL6RMDGZOYJNKKONE77JEAM27VQ7T6QC"],"known":[]},"hunks":[{"Edit":{"inode":{"change":4,"pos":238},"path":"doc/manual/installation.xml","line":272,"atom":{"NewVertex":{"up_context":[{"change":2,"pos":1550}],"down_context":[{"change":2,"pos":1550}],"flag":"BLOCK","start":0,"end":795,"inode":{"change":4,"pos":238}}},"contents":[{"Add":""},{"Add":" "},{"Add":" "},{"Add":"

"},{"Add":" Using LDAP as authentication backend (optional)"},{"Add":" "},{"Add":" Instead of using Hydra's built-in user management you can optionally use LDAP to manage roles and users."},{"Add":" "},{"Add":""},{"Add":" "},{"Add":" The hydra-server accepts the environment"},{"Add":" variable HYDRA_LDAP_CONFIG. The value of"},{"Add":" the variable should point to a valid YAML file containing the"},{"Add":" Catalyst LDAP configuration. The format of the configuration"},{"Add":" file is describe in the"},{"Add":" "},{"Add":" Catalyst::Authentication::Store::LDAP documentation."},{"Add":" An example is given below."},{"Add":" "}]}},{"Edit":{"inode":{"change":4,"pos":238},"path":"doc/manual/installation.xml","line":292,"atom":{"NewVertex":{"up_context":[{"change":2,"pos":1551}],"down_context":[{"change":2,"pos":1551}],"flag":"BLOCK","start":796,"end":1237,"inode":{"change":4,"pos":238}}},"contents":[{"Add":" "},{"Add":" Roles can be assigned to users based on their LDAP group membership"},{"Add":" (use_roles: 1 in the below example)."},{"Add":" For a user to have the role admin assigned to them"},{"Add":" they should be in the group hydra_admin. In general"},{"Add":" any LDAP group of the form hydra_some_role"},{"Add":" (notice the hydra_ prefix) will work."}]}},{"Edit":{"inode":{"change":4,"pos":238},"path":"doc/manual/installation.xml","line":300,"atom":{"NewVertex":{"up_context":[{"change":2,"pos":1563}],"down_context":[{"change":2,"pos":1563}],"flag":"BLOCK","start":1238,"end":1918,"inode":{"change":4,"pos":238}}},"contents":[{"Add":""},{"Add":" "},{"Add":"credential:"},{"Add":" class: Password"},{"Add":" password_field: password"},{"Add":" password_type: self_check"},{"Add":"store:"},{"Add":" class: LDAP"},{"Add":" ldap_server: localhost"},{"Add":" ldap_server_options.timeout: 30"},{"Add":" binddn: \"cn=root,dc=example\""},{"Add":" bindpw: notapassword"},{"Add":" start_tls: 0"},{"Add":" start_tls_options"},{"Add":" verify: none"},{"Add":" user_basedn: \"ou=users,dc=example\""},{"Add":" user_filter: \"(&(objectClass=inetOrgPerson)(cn=%s))\""},{"Add":" user_scope: one"},{"Add":" user_field: cn"},{"Add":" user_search_options:"},{"Add":" deref: always"},{"Add":" use_roles: 1"},{"Add":" role_basedn: \"ou=groups,dc=example\""},{"Add":" role_filter: \"(&(objectClass=groupOfNames)(member=%s))\""},{"Add":" role_scope: one"},{"Add":" role_field: cn"},{"Add":" role_value: dn"},{"Add":" role_search_options:"},{"Add":" deref: always"},{"Add":" "}]}}],"owner":"grahamc","repo":"hydra","token":"Pv9yCHmJgDF67x3TJwdHthTDEpzn0CPdGh/nbO1vKmM=","login":null}

…

Dependencies

Change contents