diff --git a/conf/config.php b/conf/config.php index c25910c..4c8ab8a 100644 --- a/conf/config.php +++ b/conf/config.php @@ -172,7 +172,7 @@ // if you experience weird errors and tt-rss failing to start, blank pages // after login, or content encoding errors, disable it. - putenv('TTRSS_PLUGINS=auth_internal, note'); + putenv('TTRSS_PLUGINS=auth_ldap, auth_internal, note'); // Comma-separated list of plugins to load automatically for all users. // System plugins have to be specified here. Please enable at least one // authentication plugin here (auth_*). @@ -180,6 +180,25 @@ // disable plugins specified in this list. // Disabling auth_internal in this list would automatically disable // reset password link on the login form. + + // Required parameters: +putenv('TTRSS_LDAP_AUTH_SERVER_URI=ldap://127.0.0.1:389/'); +putenv('TTRSS_LDAP_AUTH_USETLS=FALSE'); // Enable StartTLS Support for ldap:// +putenv('TTRSS_LDAP_AUTH_ALLOW_UNTRUSTED_CERT=TRUE'); // Allows untrusted certificate +putenv('TTRSS_LDAP_AUTH_BASEDN=ou=users,dc=yunohost,dc=org'); +putenv('TTRSS_LDAP_AUTH_ANONYMOUSBEFOREBIND=FALSE'); +// ??? will be replaced with the entered username(escaped) at login +putenv('TTRSS_LDAP_AUTH_SEARCHFILTER=(&(objectClass=person)(uid=???))'); + +// Optional configuration +// putenv('TTRSS_LDAP_AUTH_BINDDN=cn=serviceaccount,dc=yunohost,dc=org'); +// putenv('TTRSS_LDAP_AUTH_BINDPW=ServiceAccountsPassword'); +// putenv('TTRSS_LDAP_AUTH_LOGIN_ATTRIB=uid'); +// putenv('TTRSS_LDAP_AUTH_LOG_ATTEMPTS=FALSE'); + +// Enable Debug Logging +// putenv('TTRSS_LDAP_AUTH_DEBUG=FALSE'); + putenv('TTRSS_LOG_DESTINATION=sql'); // Log destination to use. Possible values: sql (uses internal logging diff --git a/scripts/_common.sh b/scripts/_common.sh index d77187a..812d800 100644 --- a/scripts/_common.sh +++ b/scripts/_common.sh @@ -6,7 +6,7 @@ YNH_PHP_VERSION="7.3" -pkg_dependencies="php${YNH_PHP_VERSION}-mysql php${YNH_PHP_VERSION}-json php${YNH_PHP_VERSION}-curl php${YNH_PHP_VERSION}-gd php${YNH_PHP_VERSION}-opcache \ +pkg_dependencies="php${YNH_PHP_VERSION}-ldap php${YNH_PHP_VERSION}-mysql php${YNH_PHP_VERSION}-json php${YNH_PHP_VERSION}-curl php${YNH_PHP_VERSION}-gd php${YNH_PHP_VERSION}-opcache \ php${YNH_PHP_VERSION}-fileinfo php${YNH_PHP_VERSION}-intl php${YNH_PHP_VERSION}-cli php${YNH_PHP_VERSION}-mbstring php${YNH_PHP_VERSION}-xml" #=================================================