Archived
Compare commits
24
Commits
v1.0.0
..
1c11acface
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
1c11acface | ||
|
|
481922d384 | ||
|
|
fb06f6b358 | ||
|
|
b42ce808ab | ||
|
|
067e327eb8 | ||
|
|
04e8f0cac3 | ||
|
|
677f52b135 | ||
|
|
981388784b | ||
|
|
2b15c04be0 | ||
|
|
bc0001dbb8 | ||
|
|
d43520ba95 | ||
|
|
34f9ff99ee | ||
|
|
c0fc119dc2 | ||
|
|
8edfbe1ace | ||
|
|
ec6eb5ec8b | ||
|
|
595d18b72f | ||
|
|
b63cce671c | ||
|
|
77c556aa67 | ||
|
|
ee666f6e08 | ||
|
|
87a42299e6 | ||
|
|
3ce798aced | ||
|
|
b4ee79589b | ||
|
|
9d6f62b4a3 | ||
|
|
d541062eda |
@@ -1,5 +1,5 @@
|
||||
build: clean
|
||||
CGO_ENABLED=0 go build -ldflags="-s -w" -o dist/ .
|
||||
go build -ldflags="-s -w" -o dist/ .
|
||||
|
||||
test: clean
|
||||
go run .
|
||||
|
||||
@@ -1,36 +0,0 @@
|
||||
# ProxmoxAAS LDAP - Simple REST API for LDAP
|
||||
|
||||
ProxmoxAAS LDAP provides a simple API for managing users and groups in a simplified LDAP server. Expected LDAP configuration can be initialized using [open-ldap-setup](https://git.tronnet.net/tronnet/open-ldap-setup).
|
||||
|
||||
## Installation
|
||||
|
||||
### Prerequisites
|
||||
|
||||
- Initialized LDAP server with the following configuration
|
||||
- Structure
|
||||
- Users: ou=people,...
|
||||
- objectType: inetOrgPerson
|
||||
- At least 1 user which is a member of admin group
|
||||
- Groups: ou=groups,...
|
||||
- objectType: groupOfNames
|
||||
- At least 1 admin group
|
||||
- Permissions:
|
||||
- Admin group should have write access
|
||||
- Users should have write access to own attributes (cn, sn, userPassword)
|
||||
- Enable anonymous binding
|
||||
- Load MemberOf Policy:
|
||||
- olcMemberOfDangling: ignore
|
||||
- olcMemberOfRefInt: TRUE
|
||||
- olcMemberOfGroupOC: groupOfNames
|
||||
- olcMemberOfMemberAD: member
|
||||
- olcMemberOfMemberOfAD: memberOf
|
||||
- Password Policy and TLS are recommended but not required
|
||||
|
||||
### Installation
|
||||
|
||||
1. Download `proxmoxaas-ldap` binary and `template.config.json` file from [releases](releases)
|
||||
2. Rename `template.config.json` to `config.json` and modify:
|
||||
- ldapURL: url to the ldap server ie. `ldap://ldap.domain.net`
|
||||
- baseDN: base DN ie. `dc=domain,dc=net`
|
||||
- sessionSecretKey: random value used to randomize cookie values, replace with any sufficiently large random string
|
||||
3. Run the binary
|
||||
@@ -15,7 +15,6 @@ import (
|
||||
)
|
||||
|
||||
var LDAPSessions map[string]*LDAPClient
|
||||
var APIVersion = "1.0.0"
|
||||
|
||||
func Run() {
|
||||
gob.Register(LDAPClient{})
|
||||
@@ -39,10 +38,6 @@ func Run() {
|
||||
|
||||
LDAPSessions = make(map[string]*LDAPClient)
|
||||
|
||||
router.GET("/version", func(c *gin.Context) {
|
||||
c.JSON(http.StatusOK, gin.H{"version": APIVersion})
|
||||
})
|
||||
|
||||
router.POST("/ticket", func(c *gin.Context) {
|
||||
var body Login
|
||||
if err := c.ShouldBind(&body); err != nil { // bad request from binding
|
||||
|
||||
@@ -8,6 +8,6 @@
|
||||
"path": "/",
|
||||
"httpOnly": true,
|
||||
"secure": false,
|
||||
"maxAge": 7200
|
||||
"maxAge": 7200000
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user