Cadoles
/
eole-lemonldap
20
0
Fork 0
Code Issues 11 Pull Requests Releases Wiki Activity
eole-lemonldap/dicos/71_lemonldap_ng_scribe.xml

79 lines
2.3 KiB
XML
Raw Normal View History

Smooth the configuration of LemonLDAP::NG on Scribe Ref: #30852
2020-10-14 13:19:05 +02:00
<?xml version="1.0" encoding="utf-8"?>
<creole>
<files />
Override previous fill on eolesso_adresse Ref: #30852
2020-10-14 15:54:41 +02:00
<variables>
Using Active Directory (samba4) instead of OpenLDAP Moving to Active Directory the actual auth LDAP server The password is updated in the Samba4 directory so we need to use this one and not the OpenLDAP one
2020-12-02 11:52:11 +01:00
<family name='eole sso'>
<variable name='eolesso_adresse' description="Nom de domaine du serveur d'authentification SSO" redefine="True" exists='True' />
</family>
Cleanup ldap_tls redefine
2020-11-26 16:58:32 +01:00
Override previous fill on eolesso_adresse Ref: #30852
2020-10-14 15:54:41 +02:00
</variables>
Smooth the configuration of LemonLDAP::NG on Scribe Ref: #30852
2020-10-14 13:19:05 +02:00
<constraints>
<fill name='calc_multi_condition' target='activer_sso'>
<param>oui</param>
<param type='eole' name='condition_1'>activerLemon</param>
<param name='match'>distant</param>
<param name='default_mismatch'>local</param>
</fill>
<condition name='frozen_if_in' source='activerLemon'>
<param>oui</param>
<target type='variable'>activer_sso</target>
</condition>
Using Active Directory (samba4) instead of OpenLDAP Moving to Active Directory the actual auth LDAP server The password is updated in the Samba4 directory so we need to use this one and not the OpenLDAP one
2020-12-02 11:52:11 +01:00
<auto name='calc_val' target='ldapScheme'>
<param>ldaps</param>
Smooth the configuration of LemonLDAP::NG on Scribe Ref: #30852
2020-10-14 13:19:05 +02:00
</auto>
eolesso_adresse should be forced only when LemonLDAP::NG is enabled The “calc_val” was failing when LemonLDAP::NG was disabled because “authWebName” can't be used. We shouldn't force “eolesso_adresse” when LemonLDAP::NG is disabled, the user must be able to set whatever value she wants. * dicos/71_lemonldap_ng_scribe.xml: fill the “eolesso_adresse” and freeze it when LemonLDAP::NG is enabled. Ref: #30852
2020-10-15 09:07:40 +02:00
<fill name='calc_val_first_value' target='eolesso_adresse'>
<param type='eole' optional='True' hidden='False'>authWebName</param>
<param type='eole' optional='True' hidden='False'>web_url</param>
<param type='eole'>nom_domaine_machine</param>
</fill>
Using Active Directory (samba4) instead of OpenLDAP Moving to Active Directory the actual auth LDAP server The password is updated in the Samba4 directory so we need to use this one and not the OpenLDAP one
2020-12-02 11:52:11 +01:00
<auto name='calc_val' target='ldap_port'>
<param>636</param>
</auto>
eolesso_adresse should be forced only when LemonLDAP::NG is enabled The “calc_val” was failing when LemonLDAP::NG was disabled because “authWebName” can't be used. We shouldn't force “eolesso_adresse” when LemonLDAP::NG is disabled, the user must be able to set whatever value she wants. * dicos/71_lemonldap_ng_scribe.xml: fill the “eolesso_adresse” and freeze it when LemonLDAP::NG is enabled. Ref: #30852
2020-10-15 09:07:40 +02:00
<condition name='frozen_if_in' source='activerLemon'>
<param>oui</param>
<target type='variable'>eolesso_adresse</target>
</condition>
Force local SSO on Scribe Ref: #30852
2020-10-14 15:46:39 +02:00
Smooth the configuration of LemonLDAP::NG on Scribe Ref: #30852
2020-10-14 13:19:05 +02:00
<auto name='calc_val' target='ldapServer'>
Using Active Directory (samba4) instead of OpenLDAP Moving to Active Directory the actual auth LDAP server The password is updated in the Samba4 directory so we need to use this one and not the OpenLDAP one
2020-12-02 11:52:11 +01:00
<param type='eole'>ad_address</param>
Smooth the configuration of LemonLDAP::NG on Scribe Ref: #30852
2020-10-14 13:19:05 +02:00
</auto>
<auto name='calc_val' target='ldapServerPort'>
Using Active Directory (samba4) instead of OpenLDAP Moving to Active Directory the actual auth LDAP server The password is updated in the Samba4 directory so we need to use this one and not the OpenLDAP one
2020-12-02 11:52:11 +01:00
<param type='number'>636</param>
</auto>
<auto name='calc_val' target='lemon_user_db'>
<param>AD</param>
Smooth the configuration of LemonLDAP::NG on Scribe Ref: #30852
2020-10-14 13:19:05 +02:00
</auto>
Activer la possibilité de changer son mot de passe depuis LemonLDAP ref #31347
2020-12-07 11:58:50 +01:00
<auto name='calc_val' target='llRegisterDB'>
<param>AD</param>
</auto>
Smooth the configuration of LemonLDAP::NG on Scribe Ref: #30852
2020-10-14 13:19:05 +02:00
<auto name='calc_val' target='ldapBindUserDN'>
Using Active Directory (samba4) instead of OpenLDAP Moving to Active Directory the actual auth LDAP server The password is updated in the Samba4 directory so we need to use this one and not the OpenLDAP one
2020-12-02 11:52:11 +01:00
<param type='eole'>sasl_ldap_reader</param>
Smooth the configuration of LemonLDAP::NG on Scribe Ref: #30852
2020-10-14 13:19:05 +02:00
</auto>
<auto name='calc_val' target='ldapBindUserPassword'>
Using Active Directory (samba4) instead of OpenLDAP Moving to Active Directory the actual auth LDAP server The password is updated in the Samba4 directory so we need to use this one and not the OpenLDAP one
2020-12-02 11:52:11 +01:00
<param>/etc/eole/private/sasl-reader.password</param>
Smooth the configuration of LemonLDAP::NG on Scribe Ref: #30852
2020-10-14 13:19:05 +02:00
</auto>
<auto name='calc_val' target='casFolder'>
<param type='eole'>eolesso_cas_folder</param>
</auto>
</constraints>
<help />
</creole>