application-ldap.yaml

# Copyright (C) 2024 Frachtwerk GmbH, Leopoldstraße 7C, 76133 Karlsruhe.
#
# This file is part of essencium-backend.
#
# essencium-backend is free software: you can redistribute it and/or modify
# it under the terms of the GNU Lesser General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# essencium-backend is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU Lesser General Public License for more details.
#
# You should have received a copy of the GNU Lesser General Public License
# along with essencium-backend. If not, see <http://www.gnu.org/licenses/>.

app:
  auth:
    ldap:
      enabled: true
      allow-signup: true
      update-role: true
      url: ldap://ldap.localhost:389/dc=user,dc=example,dc=de
      user-search-base: ou=users
      user-search-filter: (mail={0})
      group-search-base: ou=groups
      group-search-filter: (member={0})
      group-search-subtree: true
      manager-dn: uid=example,ou=services,ou=users,dc=user,dc=example,dc=de
      manager-password: changeme
      user-firstname-attr: givenName
      user-lastname-attr: sn
      # a mapping from the above ldap attribute's value to an essencium user role
      # if multiple mapping match, the first match takes precedence
      roles:
        - src: 'cn=admins,ou=groups,dc=user,dc=frachtwerk,dc=de'
          dst: 'ADMIN'