9cb4264560
ldap: Several fixes and improvements * changed ldap_installer::install() to activate() so that ldap can be enabled again after failing the first time * if some information is not available from ldap server return "better" values (e.g. no group instead of group = NULL) * added function Ldap_User::loaded() which is called by user profile * added configurable admin email address if not given by server * make ldap work when there is no group management on ldap server (create local groups for everybody and registered_users) and allow guest user to be managed by server (configurable guest name) * require everybody_group and registered_users_group to be in groups The changes regarding renaming install() to activate() could be superfluous with the other fixes since there should not go anything wrong during install and uninstall. However, they do no harm and are really practical if something does go wrong. Hope you can make some use of those (I diffed against current git checkouts). Fixes #1834.
50 lines
1.9 KiB
PHP
50 lines
1.9 KiB
PHP
<?php defined("SYSPATH") or die("No direct script access.");
|
|
/**
|
|
* Gallery - a web based photo album viewer and editor
|
|
* Copyright (C) 2000-2009 Bharat Mediratta
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or (at
|
|
* your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful, but
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street - Fifth Floor, Boston, MA 02110-1301, USA.
|
|
*/
|
|
/*
|
|
* @package Identity
|
|
*
|
|
* User settings, defined as arrays, or "groups". If no group name is
|
|
* used when loading the cache library, the group named "default" will be used.
|
|
*
|
|
* Each group can be used independently, and multiple groups can be used at once.
|
|
*
|
|
* Group Options:
|
|
* driver - User backend driver. Gallery comes with Gallery user driver.
|
|
* allow_updates - Flag to indicate that the back end allows updates.
|
|
* params - Driver parameters, specific to each driver.
|
|
*/
|
|
$config["ldap"] = array(
|
|
"driver" => "ldap",
|
|
"allow_updates" => false,
|
|
"params" => array(
|
|
"guest_user" => "Guest",
|
|
"groups" => array("engineering", "everybody", "guest"),
|
|
"everybody_group" => "guest",
|
|
"registered_users_group" => "everybody",
|
|
"admins" => array("alice", "bob"),
|
|
"admin_mail" => "unknown@unknown.com",
|
|
"url" => "ldaps://ldap.mycompany.com/",
|
|
"group_domain" => "ou=Posix,ou=Groups,dc=ymcompany,dc=com",
|
|
"user_domain" => "ou=People,dc=MyCompany,dc=com",
|
|
"bind_rdn" => null,
|
|
"bind_password" => null,
|
|
)
|
|
);
|