From a53f7c3df1cf81f5e32275df41653dd38157583d Mon Sep 17 00:00:00 2001 From: awlx Date: Tue, 2 Feb 2016 11:14:09 +0100 Subject: [PATCH 1/2] Added description of AD configuration options --- doc/Extensions/Authentication.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/doc/Extensions/Authentication.md b/doc/Extensions/Authentication.md index adafa6526..481809811 100644 --- a/doc/Extensions/Authentication.md +++ b/doc/Extensions/Authentication.md @@ -137,6 +137,8 @@ If you set ```$config['auth_ad_require_groupmembership']``` to 1, the authentica > Cleanup of old accounts is done using the authlog. You will need to set the cleanup date for when old accounts will be purged which will happen AUTOMATICALLY. > Please ensure that you set the $config['authlog_purge'] value to be greater than $config['active_directory]['users_purge'] otherwise old users won't be removed. +```$config['auth_ad_groups']['']['level'] = 10``` defines the active directory group which gets admin privileges at login. ```$config['auth_ad_groups']['']['level'] = 7``` defines the group with user privileges after login. + ##### Sample configuration ``` @@ -144,8 +146,8 @@ $config['auth_ad_url'] = "ldaps://your-domain.controll.er"; $config['auth_ad_check_certificates'] = 1; // or 0 $config['auth_ad_domain'] = "your-domain.com"; $config['auth_ad_base_dn'] = "dc=your-domain,dc=com"; -$config['auth_ad_groups']['admin']['level'] = 10; -$config['auth_ad_groups']['pfy']['level'] = 7; +$config['auth_ad_groups']['']['level'] = 10; +$config['auth_ad_groups']['']['level'] = 7; $config['auth_ad_require_groupmembership'] = 0; $config['active_directory']['users_purge'] = 14;//Purge users who haven't logged in for 14 days. ``` From 53be46ed7ded56feb2d8e046a697ca3a00aabd70 Mon Sep 17 00:00:00 2001 From: awlx Date: Tue, 2 Feb 2016 11:37:23 +0100 Subject: [PATCH 2/2] Changed the text to make it more clear what to change. --- doc/Extensions/Authentication.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/doc/Extensions/Authentication.md b/doc/Extensions/Authentication.md index 481809811..adb468a51 100644 --- a/doc/Extensions/Authentication.md +++ b/doc/Extensions/Authentication.md @@ -137,7 +137,6 @@ If you set ```$config['auth_ad_require_groupmembership']``` to 1, the authentica > Cleanup of old accounts is done using the authlog. You will need to set the cleanup date for when old accounts will be purged which will happen AUTOMATICALLY. > Please ensure that you set the $config['authlog_purge'] value to be greater than $config['active_directory]['users_purge'] otherwise old users won't be removed. -```$config['auth_ad_groups']['']['level'] = 10``` defines the active directory group which gets admin privileges at login. ```$config['auth_ad_groups']['']['level'] = 7``` defines the group with user privileges after login. ##### Sample configuration @@ -152,6 +151,8 @@ $config['auth_ad_require_groupmembership'] = 0; $config['active_directory']['users_purge'] = 14;//Purge users who haven't logged in for 14 days. ``` +Replace `` with your Active Directory admin-user group and `` with your standard user group. + #### Radius Authentication Please note that a mysql user is created for each user the logs in successfully. User level 1 is assigned to those accounts so you will then need to assign the relevant permissions unless you set `$config['radius']['userlevel']` to be something other than 1.