Added description of AD configuration options

This commit is contained in:
awlx
2016-02-02 11:14:09 +01:00
parent cf55f4efd6
commit a53f7c3df1
+4 -2
View File
@@ -137,6 +137,8 @@ If you set ```$config['auth_ad_require_groupmembership']``` to 1, the authentica
> Cleanup of old accounts is done using the authlog. You will need to set the cleanup date for when old accounts will be purged which will happen AUTOMATICALLY.
> Please ensure that you set the $config['authlog_purge'] value to be greater than $config['active_directory]['users_purge'] otherwise old users won't be removed.
```$config['auth_ad_groups']['<ad-admingroup>']['level'] = 10``` defines the active directory group which gets admin privileges at login. ```$config['auth_ad_groups']['<ad-usergroup>']['level'] = 7``` defines the group with user privileges after login.
##### Sample configuration
```
@@ -144,8 +146,8 @@ $config['auth_ad_url'] = "ldaps://your-domain.controll.er";
$config['auth_ad_check_certificates'] = 1; // or 0
$config['auth_ad_domain'] = "your-domain.com";
$config['auth_ad_base_dn'] = "dc=your-domain,dc=com";
$config['auth_ad_groups']['admin']['level'] = 10;
$config['auth_ad_groups']['pfy']['level'] = 7;
$config['auth_ad_groups']['<ad-admingroup>']['level'] = 10;
$config['auth_ad_groups']['<ad-usergroup>']['level'] = 7;
$config['auth_ad_require_groupmembership'] = 0;
$config['active_directory']['users_purge'] = 14;//Purge users who haven't logged in for 14 days.
```