MoinMoin: attachment:wikiconfig_snippet.txt of ReimarBauer

   1     ldap_authenticator1 = LDAPAuth(
   2         # the values shown below are the DEFAULT values (you may remove them if you are happy with them),
   3         # the examples shown in the comments are typical for Active Directory (AD) or OpenLDAP.
   4         server_uri='ldap://localhost',  # ldap / active directory server URI
   5                                         # use ldaps://server:636 url for ldaps,
   6                                         # use  ldap://server for ldap without tls (and set start_tls to 0),
   7                                         # use  ldap://server for ldap with tls (and set start_tls to 1 or 2).
   8         bind_dn='cn=Manager,dc=example,dc=com',  # We can either use some fixed user and password for binding to LDAP.
   9                      # Be careful if you need a % char in those strings - as they are used as
  10                      # a format string, you have to write %% to get a single % in the end.
  11                      #bind_dn = 'binduser@example.org' # (AD)
  12                      #bind_dn = 'cn=admin,dc=example,dc=org' # (OpenLDAP)
  13                      #bind_pw = 'secret'
  14                      # or we can use the username and password we got from the user:
  15                      #bind_dn = '%(username)s@example.org' # DN we use for first bind (AD)
  16                      #bind_pw = '%(password)s' # password we use for first bind
  17                      # or we can bind anonymously (if that is supported by your directory).
  18                      # In any case, bind_dn and bind_pw must be defined.
  19         bind_pw='secret',
  20         base_dn='ou=People,dc=example,dc=com',  # base DN we use for searching
  21                      #base_dn = 'ou=SOMEUNIT,dc=example,dc=org'
  22         scope=2, # scope of the search we do (2 == ldap.SCOPE_SUBTREE)
  23         referrals=0, # LDAP REFERRALS (0 needed for AD)
  24         search_filter='cn=%(username)s',  # ldap filter used for searching:
  25                                              #search_filter = '(sAMAccountName=%(username)s)' # (AD)
  26                                              #search_filter = '(uid=%(username)s)' # (OpenLDAP)
  27                                              # you can also do more complex filtering like:
  28                                              # "(&(cn=%(username)s)(memberOf=CN=WikiUsers,OU=Groups,DC=example,DC=org))"
  29         # some attribute names we use to extract information from LDAP (if not None,
  30         # if None, the attribute won't be extracted from LDAP):
  31         givenname_attribute=None, # often 'givenName' - ldap attribute we get the first name from
  32         surname_attribute=None, # often 'sn' - ldap attribute we get the family name from
  33         aliasname_attribute=None, # often 'displayName' - ldap attribute we get the aliasname from
  34         email_attribute=None, # often 'mail' - ldap attribute we get the email address from
  35         email_callback=None, # callback function called to make up email address
  36         coding='utf-8', # coding used for ldap queries and result values
  37         timeout=10, # how long we wait for the ldap server [s]
  38         start_tls=0, # usage of Transport Layer Security 0 = No, 1 = Try, 2 = Required
  39         tls_cacertdir='',
  40         tls_cacertfile='',
  41         tls_certfile='',
  42         tls_keyfile='',
  43         tls_require_cert=0, # 0 == ldap.OPT_X_TLS_NEVER (needed for self-signed certs)
  44         bind_once=False, # set to True to only do one bind - useful if configured to bind as the user on the first attempt
  45     )