public_git
/
nginx-ldap-auth
mirror of https://github.com/nginxinc/nginx-ldap-auth.git
1
0
Fork 1
Code Issues Releases Wiki Activity

fix formatting

This commit is contained in:
Colin Leroy 2018-11-27 14:13:10 +01:00
parent bb27acb8c8
commit 37ae19d4c4
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
README.md
View File

@ -114,12 +114,17 @@ In addition, the **X-Ldap-Template** header can be used to create complex LDAP s
Suppose, your web resource should only be available for users from `group1` group.
In such a case you can define `X-Ldap-Template` template as follows:
```
proxy_set_header X-Ldap-Template "(&(cn=%(username)s)(memberOf=cn=group1,cn=Users,dc=example,dc=com))";
```
If your LDAP server doesn't support the memberOf overlay, you can use the following parameters:
```
proxy_set_header X-Ldap-GroupBaseDN "ou=groups,dc=example,dc=com"
proxy_set_header X-Ldap-GroupTemplate "(cn=%(groupname)s)"
proxy_set_header X-Ldap-GroupLimit "group1"
```
The search filters can be combined from less complex filters using boolean operations and can be rather complex.