33 lines
1.6 KiB
Markdown
33 lines
1.6 KiB
Markdown
|
# Setting up the LDAP authentication password provider module (optional, advanced)
|
||
|
|
|
||
|
|
The playbook can install and configure the [matrix-synapse-ldap3](https://github.com/matrix-org/matrix-synapse-ldap3) LDAP Auth password provider for you.
|
||
|
|
|
||
|
|
See that project's documentation to learn what it does and why it might be useful to you.
|
||
|
|
|
||
|
|
If you decide that you'd like to let this playbook install it for you, you need some configuration like this:
|
||
|
|
|
||
|
|
```yaml
|
||
|
|
matrix_synapse_ext_password_provider_ldap_enabled: true
|
||
|
|
matrix_synapse_ext_password_provider_ldap_uri: "ldap://ldap.mydomain.tld:389"
|
||
|
|
matrix_synapse_ext_password_provider_ldap_start_tls: true
|
||
|
|
matrix_synapse_ext_password_provider_ldap_base: "ou=users,dc=example,dc=com"
|
||
|
|
matrix_synapse_ext_password_provider_ldap_attributes_uid: "uid"
|
||
|
|
matrix_synapse_ext_password_provider_ldap_attributes_mail: "mail"
|
||
|
|
matrix_synapse_ext_password_provider_ldap_attributes_name: "cn"
|
||
|
|
matrix_synapse_ext_password_provider_ldap_bind_dn: ""
|
||
|
|
matrix_synapse_ext_password_provider_ldap_bind_password: ""
|
||
|
|
matrix_synapse_ext_password_provider_ldap_filter: ""
|
||
|
|
```
|
||
|
|
|
||
|
|
|
||
|
|
## Authenticating only using a password provider
|
||
|
|
|
||
|
|
If you wish for users to **authenticate only against configured password providers** (like this one), **without consulting Synapse's local database**, feel free to disable it:
|
||
|
|
|
||
|
|
```yaml
|
||
|
|
matrix_synapse_password_config_localdb_enabled: false
|
||
|
|
```
|
||
|
|
|
||
|
|
## Using ma1sd Identity Server for authentication
|
||
|
|
If you wish to use the ma1sd Identity Server for LDAP authentication instead of [matrix-synapse-ldap3](https://github.com/matrix-org/matrix-synapse-ldap3) consult [Adjusting ma1sd Identity Server configuration](configuring-playbook-ma1sd.md#authentication).
|