public_git
/
nginx-ldap-auth
mirror of https://github.com/nginxinc/nginx-ldap-auth.git
1
0
Fork 1
Code Issues Releases Wiki Activity

fix formatting

This commit is contained in:
Colin Leroy 2018-11-27 14:13:10 +01:00
parent bb27acb8c8
commit 37ae19d4c4
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
README.md
View File

@ -114,12 +114,17 @@ In addition, the **X-Ldap-Template** header can be used to create complex LDAP s
Suppose, your web resource should only be available for users from `group1` group. Suppose, your web resource should only be available for users from `group1` group.
In such a case you can define `X-Ldap-Template` template as follows: In such a case you can define `X-Ldap-Template` template as follows:
```
proxy_set_header X-Ldap-Template "(&(cn=%(username)s)(memberOf=cn=group1,cn=Users,dc=example,dc=com))"; proxy_set_header X-Ldap-Template "(&(cn=%(username)s)(memberOf=cn=group1,cn=Users,dc=example,dc=com))";
```
If your LDAP server doesn't support the memberOf overlay, you can use the following parameters: If your LDAP server doesn't support the memberOf overlay, you can use the following parameters:
```
proxy_set_header X-Ldap-GroupBaseDN "ou=groups,dc=example,dc=com" proxy_set_header X-Ldap-GroupBaseDN "ou=groups,dc=example,dc=com"
proxy_set_header X-Ldap-GroupTemplate "(cn=%(groupname)s)" proxy_set_header X-Ldap-GroupTemplate "(cn=%(groupname)s)"
proxy_set_header X-Ldap-GroupLimit "group1" proxy_set_header X-Ldap-GroupLimit "group1"
```
The search filters can be combined from less complex filters using boolean operations and can be rather complex. The search filters can be combined from less complex filters using boolean operations and can be rather complex.