From 5bee73180d8bdba6beec38301812f6d62fb07f37 Mon Sep 17 00:00:00 2001 From: arcoast <81871508+arcoast@users.noreply.github.com> Date: Tue, 14 Feb 2023 17:22:49 +0000 Subject: [PATCH] example_configs: add authentik configuration This should import users, groups & memberships --- README.md | 1 + example_configs/authentik.md | 105 +++++++++++++++++++++++++++++++++++ 2 files changed, 106 insertions(+) create mode 100644 example_configs/authentik.md diff --git a/README.md b/README.md index ecf4c71..463ea89 100644 --- a/README.md +++ b/README.md @@ -232,6 +232,7 @@ folder for help with: - [Airsonic Advanced](example_configs/airsonic-advanced.md) - [Apache Guacamole](example_configs/apacheguacamole.md) - [Authelia](example_configs/authelia_config.yml) +- [Authentik](example_configs/authentik.md) - [Bookstack](example_configs/bookstack.env.example) - [Calibre-Web](example_configs/calibre_web.md) - [Dell iDRAC](example_configs/dell_idrac.md) diff --git a/example_configs/authentik.md b/example_configs/authentik.md new file mode 100644 index 0000000..1b4f73a --- /dev/null +++ b/example_configs/authentik.md @@ -0,0 +1,105 @@ +# Name +``` +lldap +``` + +# Slug +``` +lldap +``` +- [x] Enabled +- [x] Sync Users +- [x] User password writeback +- [x] Sync groups + +# Connection settings + +## Server URI +``` +ldap://lldap:3890 +``` + +- [ ] Enable StartTLS + +## TLS Verification Certificate +``` +--------- +``` + +## Bind CN +``` +uid=admin,ou=people,dc=example,dc=com +``` + +## Bind Password +``` +ADMIN_PASSWORD +``` + +## Base DN +``` +dc=example,dc=com +``` + +# LDAP Attribute mapping +## User Property Mappings +- [x] authentik default LDAP Mapping: mail +- [x] authentik default LDAP Mapping: Name +- [x] authentik default Active Directory Mapping: givenName +- [ ] authentik default Active Directory Mapping: sAMAccountName +- [x] authentik default Active Directory Mapping: sn +- [ ] authentik default Active Directory Mapping: userPrincipalName +- [x] authentik default OpenLDAP Mapping: cn +- [x] authentik default OpenLDAP Mapping: uid + +## Group Property Mappings +- [ ] authentik default LDAP Mapping: mail +- [ ] authentik default LDAP Mapping: Name +- [ ] authentik default Active Directory Mapping: givenName +- [ ] authentik default Active Directory Mapping: sAMAccountName +- [ ] authentik default Active Directory Mapping: sn +- [ ] authentik default Active Directory Mapping: userPrincipalName +- [x] authentik default OpenLDAP Mapping: cn +- [ ] authentik default OpenLDAP Mapping: uid + +# Additional settings + +## Group +``` +--------- +``` + +## User path +``` +LDAP/users +``` + +## Addition User DN +``` +ou=people +``` + +## Addition Group DN +``` +ou=groups +``` + +## User object filter +``` +(objectClass=person) +``` + +## Group object filter +``` +(objectClass=groupOfUniqueNames) +``` + +## Group membership field +``` +member +``` + +## Object uniqueness field +``` +uid +```