mirror of
https://github.com/lldap/lldap.git
synced 2024-11-25 09:06:03 +00:00
20 lines
1.2 KiB
Markdown
20 lines
1.2 KiB
Markdown
|
# Configuration for Kasm
|
||
|
|
|
||
|
|
In Kasm, go to *Admin* -> *Authentication* -> *LDAP* and add a configuration.
|
||
|
|
- *Name*: whatever you like
|
||
|
|
- *Url* is your lldap host (or IP) and port, e.g. `ldap://lldap.example.com:3890`
|
||
|
|
- *Search Base* is is your base dn, e.g `dc=example,dc=com`
|
||
|
|
- *Search Filter* is `(&(objectClass=person)(uid={0})(memberof=cn=kasm,ou=groups,dc=example,dc=com))`. Replace `cn=kasm,ou=groups,dc=example,dc=com` with the dn to the group necessary to login to Kasm.
|
||
|
|
- *Group Membership Filter* `(&(objectClass=groupOfUniqueNames)(member={0}))`
|
||
|
|
- *Email attribute* `mail`
|
||
|
|
- *Service Account DN* a lldap user, preferably not a admin but a member of the group `lldap_strict readonly`. Mine is called `cn=query,ou=people,dc=example,dc=com`
|
||
|
|
- *Service Account Password*: querys password
|
||
|
|
- Activate *Search Subtree*, *Auto Create App User* and *Enabled*
|
||
|
|
- under *Attribute Mapping* you can map the following:
|
||
|
|
- *Email* -> `mail`
|
||
|
|
- *First Name* -> `givenname`
|
||
|
|
- *Last Name* -> `sn`
|
||
|
|
- If you want to map groups from your lldap to Kasm, edit the group, scroll to *SSO Group Mappings* and add a new SSO mapping:
|
||
|
|
- select your lldap as provider
|
||
|
|
- *Group Attributes* is the full DN of your group, e.g. `cn=kasm_moreaccess,ou=groups,dc=example,dc=com`
|