mirror of
https://github.com/Kozea/Radicale.git
synced 2025-06-26 16:45:52 +00:00
LDAP auth: indroduce config option 'ldap_user_attribute'
This option gives us - flexible authentication options where the name used for logging on does not have to be the account name e.g. use ldap_filter = (&(obhjectclass=inetOrgperson)(|(cn={0]})(mail={0}))) to allow loginng on using the cn or the mail address - automatically consistent / canonicalized username values (i.e. exactly the way the LDAP server returns them)
This commit is contained in:
parent
0253682c00
commit
99f5ec389d
4 changed files with 46 additions and 9 deletions
|
@ -901,6 +901,12 @@ The search filter to find the user DN to authenticate by the username. User '{0}
|
|||
|
||||
Default: `(cn={0})`
|
||||
|
||||
#### ldap_user_attribute
|
||||
|
||||
The LDAP attribute whose value shall be used as the user name after successful authentication
|
||||
|
||||
Default: not set, i.e. the login name given is used directly.
|
||||
|
||||
##### ldap_load_groups
|
||||
|
||||
Load the ldap groups of the authenticated user. These groups can be used later on to define rights. This also gives you access to the group calendars, if they exist.
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue