From bb27acb8c8d6eb168a4088a8f60cecaf2e181a82 Mon Sep 17 00:00:00 2001 From: Colin Leroy Date: Tue, 27 Nov 2018 12:10:05 +0100 Subject: [PATCH] Document the group parameters --- README.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/README.md b/README.md index aaf8131..1a38186 100644 --- a/README.md +++ b/README.md @@ -116,6 +116,11 @@ In such a case you can define `X-Ldap-Template` template as follows: proxy_set_header X-Ldap-Template "(&(cn=%(username)s)(memberOf=cn=group1,cn=Users,dc=example,dc=com))"; +If your LDAP server doesn't support the memberOf overlay, you can use the following parameters: +proxy_set_header X-Ldap-GroupBaseDN "ou=groups,dc=example,dc=com" +proxy_set_header X-Ldap-GroupTemplate "(cn=%(groupname)s)" +proxy_set_header X-Ldap-GroupLimit "group1" + The search filters can be combined from less complex filters using boolean operations and can be rather complex. The reference implementation uses cookie-based authentication. If you are using HTTP basic authentication instead, comment out the following directives as shown: