techies/authelia
1
0
Fork 0
mirror of https://github.com/0rangebananaspy/authelia.git synced 2024-09-14 22:47:21 +07:00
Code Issues Projects Releases Wiki Activity
93352aa36b
authelia/internal/suites/example/compose/ldap/ldif/03-base.ldif

79 lines
2.2 KiB
Plaintext
Raw Normal View History

[MISC] Catch OpenLDAP ppolicy error (#1508) * [MISC] Catch OpenLDAP ppolicy error Further to the discussion over at #361, this change now ensures that OpenLDAP password complexity errors are caught and appropriately handled. This change also includes the PasswordComplexity test suite in the LDAP integration suite. This is because a ppolicy has been setup and enforced. * Remove password history for integration tests * Adjust max failures due to regulation trigger * Fix error handling for password resets * Refactor and include code suggestions
2020-12-16 08:30:03 +07:00
dn: cn=pwmanager,{{ LDAP_BASE_DN }}
cn: Password Manager
perf(authentication): improve ldap dynamic replacement performance (#2239) This change means we only check the filters for the existence of placeholders that cannot be replaced at startup. We then utilized cached results of that lookup for subsequent replacements.
2021-08-05 11:17:07 +07:00
displayName: Password Manager
[MISC] Catch OpenLDAP ppolicy error (#1508) * [MISC] Catch OpenLDAP ppolicy error Further to the discussion over at #361, this change now ensures that OpenLDAP password complexity errors are caught and appropriately handled. This change also includes the PasswordComplexity test suite in the LDAP integration suite. This is because a ppolicy has been setup and enforced. * Remove password history for integration tests * Adjust max failures due to regulation trigger * Fix error handling for password resets * Refactor and include code suggestions
2020-12-16 08:30:03 +07:00
givenName: Password
perf(authentication): improve ldap dynamic replacement performance (#2239) This change means we only check the filters for the existence of placeholders that cannot be replaced at startup. We then utilized cached results of that lookup for subsequent replacements.
2021-08-05 11:17:07 +07:00
objectClass: inetOrgPerson
objectClass: top
[MISC] Catch OpenLDAP ppolicy error (#1508) * [MISC] Catch OpenLDAP ppolicy error Further to the discussion over at #361, this change now ensures that OpenLDAP password complexity errors are caught and appropriately handled. This change also includes the PasswordComplexity test suite in the LDAP integration suite. This is because a ppolicy has been setup and enforced. * Remove password history for integration tests * Adjust max failures due to regulation trigger * Fix error handling for password resets * Refactor and include code suggestions
2020-12-16 08:30:03 +07:00
mail: password.manager@authelia.com
sn: Manager
uid: pwmanager
userPassword: {CRYPT}$6$rounds=500000$jgiCMRyGXzoqpxS3$w2pJeZnnH8bwW3zzvoMWtTRfQYsHbWbD/hquuQ5vUeIyl9gdwBIt6RWk2S6afBA0DPakbeWgD/4SZPiS0hYtU/
dn: ou=groups,{{ LDAP_BASE_DN }}
perf(authentication): improve ldap dynamic replacement performance (#2239) This change means we only check the filters for the existence of placeholders that cannot be replaced at startup. We then utilized cached results of that lookup for subsequent replacements.
2021-08-05 11:17:07 +07:00
objectClass: organizationalUnit
objectClass: top
Registration process sends an email to allow user to register its U2F device
2017-01-22 23:54:45 +07:00
ou: groups
[MISC] Catch OpenLDAP ppolicy error (#1508) * [MISC] Catch OpenLDAP ppolicy error Further to the discussion over at #361, this change now ensures that OpenLDAP password complexity errors are caught and appropriately handled. This change also includes the PasswordComplexity test suite in the LDAP integration suite. This is because a ppolicy has been setup and enforced. * Remove password history for integration tests * Adjust max failures due to regulation trigger * Fix error handling for password resets * Refactor and include code suggestions
2020-12-16 08:30:03 +07:00
dn: ou=users,{{ LDAP_BASE_DN }}
perf(authentication): improve ldap dynamic replacement performance (#2239) This change means we only check the filters for the existence of placeholders that cannot be replaced at startup. We then utilized cached results of that lookup for subsequent replacements.
2021-08-05 11:17:07 +07:00
objectClass: organizationalUnit
objectClass: top
Registration process sends an email to allow user to register its U2F device
2017-01-22 23:54:45 +07:00
ou: users
[MISC] Catch OpenLDAP ppolicy error (#1508) * [MISC] Catch OpenLDAP ppolicy error Further to the discussion over at #361, this change now ensures that OpenLDAP password complexity errors are caught and appropriately handled. This change also includes the PasswordComplexity test suite in the LDAP integration suite. This is because a ppolicy has been setup and enforced. * Remove password history for integration tests * Adjust max failures due to regulation trigger * Fix error handling for password resets * Refactor and include code suggestions
2020-12-16 08:30:03 +07:00
dn: cn=dev,ou=groups,{{ LDAP_BASE_DN }}
Add the access_control entry in the config file to allow the user to define per group rules to access the subdomains
2017-03-25 21:17:21 +07:00
cn: dev
[MISC] Catch OpenLDAP ppolicy error (#1508) * [MISC] Catch OpenLDAP ppolicy error Further to the discussion over at #361, this change now ensures that OpenLDAP password complexity errors are caught and appropriately handled. This change also includes the PasswordComplexity test suite in the LDAP integration suite. This is because a ppolicy has been setup and enforced. * Remove password history for integration tests * Adjust max failures due to regulation trigger * Fix error handling for password resets * Refactor and include code suggestions
2020-12-16 08:30:03 +07:00
member: cn=John Doe (external),ou=users,{{ LDAP_BASE_DN }}
member: cn=Bob Dylan,ou=users,{{ LDAP_BASE_DN }}
perf(authentication): improve ldap dynamic replacement performance (#2239) This change means we only check the filters for the existence of placeholders that cannot be replaced at startup. We then utilized cached results of that lookup for subsequent replacements.
2021-08-05 11:17:07 +07:00
objectClass: groupOfNames
objectClass: top
Registration process sends an email to allow user to register its U2F device
2017-01-22 23:54:45 +07:00
[MISC] Catch OpenLDAP ppolicy error (#1508) * [MISC] Catch OpenLDAP ppolicy error Further to the discussion over at #361, this change now ensures that OpenLDAP password complexity errors are caught and appropriately handled. This change also includes the PasswordComplexity test suite in the LDAP integration suite. This is because a ppolicy has been setup and enforced. * Remove password history for integration tests * Adjust max failures due to regulation trigger * Fix error handling for password resets * Refactor and include code suggestions
2020-12-16 08:30:03 +07:00
dn: cn=admins,ou=groups,{{ LDAP_BASE_DN }}
Fix and parallelize integration tests.
2019-11-30 23:49:52 +07:00
cn: admins
[MISC] Catch OpenLDAP ppolicy error (#1508) * [MISC] Catch OpenLDAP ppolicy error Further to the discussion over at #361, this change now ensures that OpenLDAP password complexity errors are caught and appropriately handled. This change also includes the PasswordComplexity test suite in the LDAP integration suite. This is because a ppolicy has been setup and enforced. * Remove password history for integration tests * Adjust max failures due to regulation trigger * Fix error handling for password resets * Refactor and include code suggestions
2020-12-16 08:30:03 +07:00
member: cn=John Doe (external),ou=users,{{ LDAP_BASE_DN }}
perf(authentication): improve ldap dynamic replacement performance (#2239) This change means we only check the filters for the existence of placeholders that cannot be replaced at startup. We then utilized cached results of that lookup for subsequent replacements.
2021-08-05 11:17:07 +07:00
objectClass: groupOfNames
objectClass: top
Add the access_control entry in the config file to allow the user to define per group rules to access the subdomains
2017-03-25 21:17:21 +07:00
[MISC] Catch OpenLDAP ppolicy error (#1508) * [MISC] Catch OpenLDAP ppolicy error Further to the discussion over at #361, this change now ensures that OpenLDAP password complexity errors are caught and appropriately handled. This change also includes the PasswordComplexity test suite in the LDAP integration suite. This is because a ppolicy has been setup and enforced. * Remove password history for integration tests * Adjust max failures due to regulation trigger * Fix error handling for password resets * Refactor and include code suggestions
2020-12-16 08:30:03 +07:00
dn: cn=John Doe (external),ou=users,{{ LDAP_BASE_DN }}
[BUGFIX] LDAP group retrieval of users with parenthesis in their name (#713) This aligns the search filter escaping to [RFC4515](https://tools.ietf.org/search/rfc4515). `base.ldif` has also been updated to be a closer match to RFC 2307.
2020-03-16 15:55:03 +07:00
cn: John Doe (external)
perf(authentication): improve ldap dynamic replacement performance (#2239) This change means we only check the filters for the existence of placeholders that cannot be replaced at startup. We then utilized cached results of that lookup for subsequent replacements.
2021-08-05 11:17:07 +07:00
displayName: John Doe
[BUGFIX] LDAP group retrieval of users with parenthesis in their name (#713) This aligns the search filter escaping to [RFC4515](https://tools.ietf.org/search/rfc4515). `base.ldif` has also been updated to be a closer match to RFC 2307.
2020-03-16 15:55:03 +07:00
givenName: John
perf(authentication): improve ldap dynamic replacement performance (#2239) This change means we only check the filters for the existence of placeholders that cannot be replaced at startup. We then utilized cached results of that lookup for subsequent replacements.
2021-08-05 11:17:07 +07:00
objectClass: inetOrgPerson
objectClass: top
Add SMTP notifier as an available option in configuration One can now plug its own SMTP server to send notifications for identity validation and password reset requests. Filesystem has been removed from the template configuration file since even tests now use mail catcher (the fake webmail) to retrieve the email and the confirmation link.
2017-09-24 19:49:03 +07:00
mail: john.doe@authelia.com
[BUGFIX] LDAP group retrieval of users with parenthesis in their name (#713) This aligns the search filter escaping to [RFC4515](https://tools.ietf.org/search/rfc4515). `base.ldif` has also been updated to be a closer match to RFC 2307.
2020-03-16 15:55:03 +07:00
sn: Doe
uid: john
perf(authentication): improve ldap dynamic replacement performance (#2239) This change means we only check the filters for the existence of placeholders that cannot be replaced at startup. We then utilized cached results of that lookup for subsequent replacements.
2021-08-05 11:17:07 +07:00
userPassword: {CRYPT}$6$rounds=500000$jgiCMRyGXzoqpxS3$w2pJeZnnH8bwW3zzvoMWtTRfQYsHbWbD/hquuQ5vUeIyl9gdwBIt6RWk2S6afBA0DPakbeWgD/4SZPiS0hYtU/
Add the access_control entry in the config file to allow the user to define per group rules to access the subdomains
2017-03-25 21:17:21 +07:00
[MISC] Catch OpenLDAP ppolicy error (#1508) * [MISC] Catch OpenLDAP ppolicy error Further to the discussion over at #361, this change now ensures that OpenLDAP password complexity errors are caught and appropriately handled. This change also includes the PasswordComplexity test suite in the LDAP integration suite. This is because a ppolicy has been setup and enforced. * Remove password history for integration tests * Adjust max failures due to regulation trigger * Fix error handling for password resets * Refactor and include code suggestions
2020-12-16 08:30:03 +07:00
dn: cn=Harry Potter,ou=users,{{ LDAP_BASE_DN }}
[BUGFIX] LDAP group retrieval of users with parenthesis in their name (#713) This aligns the search filter escaping to [RFC4515](https://tools.ietf.org/search/rfc4515). `base.ldif` has also been updated to be a closer match to RFC 2307.
2020-03-16 15:55:03 +07:00
cn: Harry Potter
perf(authentication): improve ldap dynamic replacement performance (#2239) This change means we only check the filters for the existence of placeholders that cannot be replaced at startup. We then utilized cached results of that lookup for subsequent replacements.
2021-08-05 11:17:07 +07:00
displayName: Harry Potter
[BUGFIX] LDAP group retrieval of users with parenthesis in their name (#713) This aligns the search filter escaping to [RFC4515](https://tools.ietf.org/search/rfc4515). `base.ldif` has also been updated to be a closer match to RFC 2307.
2020-03-16 15:55:03 +07:00
givenName: Harry
perf(authentication): improve ldap dynamic replacement performance (#2239) This change means we only check the filters for the existence of placeholders that cannot be replaced at startup. We then utilized cached results of that lookup for subsequent replacements.
2021-08-05 11:17:07 +07:00
objectClass: inetOrgPerson
objectClass: top
Add SMTP notifier as an available option in configuration One can now plug its own SMTP server to send notifications for identity validation and password reset requests. Filesystem has been removed from the template configuration file since even tests now use mail catcher (the fake webmail) to retrieve the email and the confirmation link.
2017-09-24 19:49:03 +07:00
mail: harry.potter@authelia.com
[BUGFIX] LDAP group retrieval of users with parenthesis in their name (#713) This aligns the search filter escaping to [RFC4515](https://tools.ietf.org/search/rfc4515). `base.ldif` has also been updated to be a closer match to RFC 2307.
2020-03-16 15:55:03 +07:00
sn: Potter
uid: harry
perf(authentication): improve ldap dynamic replacement performance (#2239) This change means we only check the filters for the existence of placeholders that cannot be replaced at startup. We then utilized cached results of that lookup for subsequent replacements.
2021-08-05 11:17:07 +07:00
userPassword: {CRYPT}$6$rounds=500000$jgiCMRyGXzoqpxS3$w2pJeZnnH8bwW3zzvoMWtTRfQYsHbWbD/hquuQ5vUeIyl9gdwBIt6RWk2S6afBA0DPakbeWgD/4SZPiS0hYtU/
Registration process sends an email to allow user to register its U2F device
2017-01-22 23:54:45 +07:00
[MISC] Catch OpenLDAP ppolicy error (#1508) * [MISC] Catch OpenLDAP ppolicy error Further to the discussion over at #361, this change now ensures that OpenLDAP password complexity errors are caught and appropriately handled. This change also includes the PasswordComplexity test suite in the LDAP integration suite. This is because a ppolicy has been setup and enforced. * Remove password history for integration tests * Adjust max failures due to regulation trigger * Fix error handling for password resets * Refactor and include code suggestions
2020-12-16 08:30:03 +07:00
dn: cn=Bob Dylan,ou=users,{{ LDAP_BASE_DN }}
[BUGFIX] LDAP group retrieval of users with parenthesis in their name (#713) This aligns the search filter escaping to [RFC4515](https://tools.ietf.org/search/rfc4515). `base.ldif` has also been updated to be a closer match to RFC 2307.
2020-03-16 15:55:03 +07:00
cn: Bob Dylan
perf(authentication): improve ldap dynamic replacement performance (#2239) This change means we only check the filters for the existence of placeholders that cannot be replaced at startup. We then utilized cached results of that lookup for subsequent replacements.
2021-08-05 11:17:07 +07:00
displayName: Bob Dylan
[BUGFIX] LDAP group retrieval of users with parenthesis in their name (#713) This aligns the search filter escaping to [RFC4515](https://tools.ietf.org/search/rfc4515). `base.ldif` has also been updated to be a closer match to RFC 2307.
2020-03-16 15:55:03 +07:00
givenName: Bob
perf(authentication): improve ldap dynamic replacement performance (#2239) This change means we only check the filters for the existence of placeholders that cannot be replaced at startup. We then utilized cached results of that lookup for subsequent replacements.
2021-08-05 11:17:07 +07:00
objectClass: inetOrgPerson
objectClass: top
Add SMTP notifier as an available option in configuration One can now plug its own SMTP server to send notifications for identity validation and password reset requests. Filesystem has been removed from the template configuration file since even tests now use mail catcher (the fake webmail) to retrieve the email and the confirmation link.
2017-09-24 19:49:03 +07:00
mail: bob.dylan@authelia.com
[BUGFIX] LDAP group retrieval of users with parenthesis in their name (#713) This aligns the search filter escaping to [RFC4515](https://tools.ietf.org/search/rfc4515). `base.ldif` has also been updated to be a closer match to RFC 2307.
2020-03-16 15:55:03 +07:00
sn: Dylan
uid: bob
perf(authentication): improve ldap dynamic replacement performance (#2239) This change means we only check the filters for the existence of placeholders that cannot be replaced at startup. We then utilized cached results of that lookup for subsequent replacements.
2021-08-05 11:17:07 +07:00
userPassword: {CRYPT}$6$rounds=500000$jgiCMRyGXzoqpxS3$w2pJeZnnH8bwW3zzvoMWtTRfQYsHbWbD/hquuQ5vUeIyl9gdwBIt6RWk2S6afBA0DPakbeWgD/4SZPiS0hYtU/
Add an LDAP user search filter in the configuration filte to specify the user attribute to search for in LDAP
2017-03-16 07:25:55 +07:00
[MISC] Catch OpenLDAP ppolicy error (#1508) * [MISC] Catch OpenLDAP ppolicy error Further to the discussion over at #361, this change now ensures that OpenLDAP password complexity errors are caught and appropriately handled. This change also includes the PasswordComplexity test suite in the LDAP integration suite. This is because a ppolicy has been setup and enforced. * Remove password history for integration tests * Adjust max failures due to regulation trigger * Fix error handling for password resets * Refactor and include code suggestions
2020-12-16 08:30:03 +07:00
dn: cn=James Dean,ou=users,{{ LDAP_BASE_DN }}
[BUGFIX] LDAP group retrieval of users with parenthesis in their name (#713) This aligns the search filter escaping to [RFC4515](https://tools.ietf.org/search/rfc4515). `base.ldif` has also been updated to be a closer match to RFC 2307.
2020-03-16 15:55:03 +07:00
cn: James Dean
perf(authentication): improve ldap dynamic replacement performance (#2239) This change means we only check the filters for the existence of placeholders that cannot be replaced at startup. We then utilized cached results of that lookup for subsequent replacements.
2021-08-05 11:17:07 +07:00
displayName: James Dean
[BUGFIX] LDAP group retrieval of users with parenthesis in their name (#713) This aligns the search filter escaping to [RFC4515](https://tools.ietf.org/search/rfc4515). `base.ldif` has also been updated to be a closer match to RFC 2307.
2020-03-16 15:55:03 +07:00
givenName: James
perf(authentication): improve ldap dynamic replacement performance (#2239) This change means we only check the filters for the existence of placeholders that cannot be replaced at startup. We then utilized cached results of that lookup for subsequent replacements.
2021-08-05 11:17:07 +07:00
objectClass: inetOrgPerson
objectClass: top
Add SMTP notifier as an available option in configuration One can now plug its own SMTP server to send notifications for identity validation and password reset requests. Filesystem has been removed from the template configuration file since even tests now use mail catcher (the fake webmail) to retrieve the email and the confirmation link.
2017-09-24 19:49:03 +07:00
mail: james.dean@authelia.com
[BUGFIX] LDAP group retrieval of users with parenthesis in their name (#713) This aligns the search filter escaping to [RFC4515](https://tools.ietf.org/search/rfc4515). `base.ldif` has also been updated to be a closer match to RFC 2307.
2020-03-16 15:55:03 +07:00
sn: Dean
uid: james
perf(authentication): improve ldap dynamic replacement performance (#2239) This change means we only check the filters for the existence of placeholders that cannot be replaced at startup. We then utilized cached results of that lookup for subsequent replacements.
2021-08-05 11:17:07 +07:00
userPassword: {CRYPT}$6$rounds=500000$jgiCMRyGXzoqpxS3$w2pJeZnnH8bwW3zzvoMWtTRfQYsHbWbD/hquuQ5vUeIyl9gdwBIt6RWk2S6afBA0DPakbeWgD/4SZPiS0hYtU/
Parameterize authentication regulation via configuration file. Both for flexibility and for testing purposes.
2017-09-03 06:25:43 +07:00
Reference in New Issue Copy Permalink