9767e62c72
composer require ldc/web-status-checker-laravel remove Old static status checker Fix ImportMedia WIP commands OK many fixes Fix and try to optimize folder component Fix front icons + actions based on icons Favico front fix alert Fix Media upload on depot fix folder component buttons Full front fix with perf due tu vuejs Download medias Navigate within medias superfix Move media + loader isLocked boolean and remove media fix Folder scroll fix arcadia link color red Fix panier show external Tons of fixes back as front REwrited all
339 lines
12 KiB
PHP
339 lines
12 KiB
PHP
<?php
|
|
|
|
return [
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Connection
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| The LDAP connection to use for Laravel authentication.
|
|
|
|
|
| You must specify connections in your `config/ldap.php` configuration file.
|
|
|
|
|
*/
|
|
|
|
'connection' => env('LDAP_CONNECTION', 'default'),
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Provider
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| The LDAP authentication provider to use depending
|
|
| if you require database synchronization.
|
|
|
|
|
| For synchronizing LDAP users to your local applications database, use the provider:
|
|
|
|
|
| Adldap\Laravel\Auth\DatabaseUserProvider::class
|
|
|
|
|
| Otherwise, if you just require LDAP authentication, use the provider:
|
|
|
|
|
| Adldap\Laravel\Auth\NoDatabaseUserProvider::class
|
|
|
|
|
*/
|
|
|
|
'provider' => Adldap\Laravel\Auth\DatabaseUserProvider::class,
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Model
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| The model to utilize for authentication and importing.
|
|
|
|
|
| This option is only applicable to the DatabaseUserProvider.
|
|
|
|
|
*/
|
|
|
|
'model' => App\Models\User::class,
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Rules
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| Rules allow you to control user authentication requests depending on scenarios.
|
|
|
|
|
| You can create your own rules and insert them here.
|
|
|
|
|
| All rules must extend from the following class:
|
|
|
|
|
| Adldap\Laravel\Validation\Rules\Rule
|
|
|
|
|
*/
|
|
|
|
'rules' => [
|
|
|
|
// Denys deleted users from authenticating.
|
|
Adldap\Laravel\Validation\Rules\DenyTrashed::class,
|
|
|
|
// Allows only manually imported users to authenticate.
|
|
Adldap\Laravel\Validation\Rules\OnlyImported::class,
|
|
|
|
],
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Scopes
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| Scopes allow you to restrict the LDAP query that locates
|
|
| users upon import and authentication.
|
|
|
|
|
| All scopes must implement the following interface:
|
|
|
|
|
| Adldap\Laravel\Scopes\ScopeInterface
|
|
|
|
|
*/
|
|
|
|
'scopes' => [
|
|
|
|
// Only allows users with a user principal name to authenticate.
|
|
// Suitable when using ActiveDirectory.
|
|
// Adldap\Laravel\Scopes\UpnScope::class,
|
|
// Only allows users with a uid to authenticate.
|
|
// Suitable when using OpenLDAP.
|
|
Adldap\Laravel\Scopes\UidScope::class,
|
|
App\Scopes\OpenLdapScope::class,
|
|
],
|
|
|
|
'identifiers' => [
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| LDAP
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| Locate Users By:
|
|
|
|
|
| This value is the users attribute you would like to locate LDAP
|
|
| users by in your directory.
|
|
|
|
|
| For example, using the default configuration below, if you're
|
|
| authenticating users with an email address, your LDAP server
|
|
| will be queried for a user with the a `userprincipalname`
|
|
| equal to the entered email address.
|
|
|
|
|
| Bind Users By:
|
|
|
|
|
| This value is the users attribute you would
|
|
| like to use to bind to your LDAP server.
|
|
|
|
|
| For example, when a user is located by the above attribute,
|
|
| the users attribute you specify below will be used as
|
|
| the 'username' to bind to your LDAP server.
|
|
|
|
|
| This is usually their distinguished name.
|
|
|
|
|
*/
|
|
|
|
'ldap' => [
|
|
|
|
'locate_users_by' => 'uid',
|
|
|
|
'bind_users_by' => 'uid',
|
|
|
|
],
|
|
|
|
'database' => [
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| GUID Column
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| The value of this option is the database column that will contain the
|
|
| LDAP users global identifier. This column does not need to be added
|
|
| to the sync attributes below. It is synchronized automatically.
|
|
|
|
|
| This option is only applicable to the DatabaseUserProvider.
|
|
|
|
|
*/
|
|
|
|
'guid_column' => 'objectguid',
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Username Column
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| The value of this option is the database column that contains your
|
|
| users login username.
|
|
|
|
|
| This column must be added to your sync attributes below to be
|
|
| properly synchronized.
|
|
|
|
|
| This option is only applicable to the DatabaseUserProvider.
|
|
|
|
|
*/
|
|
|
|
'username_column' => 'matricule',
|
|
|
|
],
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Windows Authentication Middleware (SSO)
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| Local Users By:
|
|
|
|
|
| This value is the users attribute you would like to locate LDAP
|
|
| users by in your directory.
|
|
|
|
|
| For example, if 'samaccountname' is the value, then your LDAP server is
|
|
| queried for a user with the 'samaccountname' equal to the value of
|
|
| $_SERVER['AUTH_USER'].
|
|
|
|
|
| If a user is found, they are imported (if using the DatabaseUserProvider)
|
|
| into your local database, then logged in.
|
|
|
|
|
| Server Key:
|
|
|
|
|
| This value represents the 'key' of the $_SERVER
|
|
| array to pull the users account name from.
|
|
|
|
|
| For example, $_SERVER['AUTH_USER'].
|
|
|
|
|
*/
|
|
|
|
'windows' => [
|
|
|
|
'locate_users_by' => 'distinguishedname',
|
|
|
|
'server_key' => 'AUTH_USER',
|
|
|
|
],
|
|
|
|
],
|
|
|
|
'passwords' => [
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Password Sync
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| The password sync option allows you to automatically synchronize users
|
|
| LDAP passwords to your local database. These passwords are hashed
|
|
| natively by Laravel using the Hash::make() method.
|
|
|
|
|
| Enabling this option would also allow users to login to their accounts
|
|
| using the password last used when an LDAP connection was present.
|
|
|
|
|
| If this option is disabled, the local database account is applied a
|
|
| random 16 character hashed password upon first login, and will
|
|
| lose access to this account upon loss of LDAP connectivity.
|
|
|
|
|
| This option is only applicable to the DatabaseUserProvider.
|
|
|
|
|
*/
|
|
|
|
'sync' => env('LDAP_PASSWORD_SYNC', false),
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Column
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| This is the column of your users database table
|
|
| that is used to store passwords.
|
|
|
|
|
| Set this to `null` if you do not have a password column.
|
|
|
|
|
| This option is only applicable to the DatabaseUserProvider.
|
|
|
|
|
*/
|
|
|
|
'column' => 'password',
|
|
|
|
],
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Login Fallback
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| The login fallback option allows you to login as a user located in the
|
|
| local database if active directory authentication fails.
|
|
|
|
|
| Set this to true if you would like to enable it.
|
|
|
|
|
| This option is only applicable to the DatabaseUserProvider.
|
|
|
|
|
*/
|
|
|
|
'login_fallback' => env('LDAP_LOGIN_FALLBACK', true),
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Sync Attributes
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| Attributes specified here will be added / replaced on the user model
|
|
| upon login, automatically synchronizing and keeping the attributes
|
|
| up to date.
|
|
|
|
|
| The array key represents the users Laravel model key, and
|
|
| the value represents the users LDAP attribute.
|
|
|
|
|
| You **must** include the users login attribute here.
|
|
|
|
|
| This option is only applicable to the DatabaseUserProvider.
|
|
|
|
|
*/
|
|
|
|
'sync_attributes' => [
|
|
|
|
'email' => 'mail',
|
|
'matricule' => 'uid',
|
|
'lastname' => 'sn',
|
|
'firstname' => 'givenName',
|
|
],
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Logging
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| User authentication attempts will be logged using Laravel's
|
|
| default logger if this setting is enabled.
|
|
|
|
|
| No credentials are logged, only usernames.
|
|
|
|
|
| This is usually stored in the '/storage/logs' directory
|
|
| in the root of your application.
|
|
|
|
|
| This option is useful for debugging as well as auditing.
|
|
|
|
|
| You can freely remove any events you would not like to log below,
|
|
| as well as use your own listeners if you would prefer.
|
|
|
|
|
*/
|
|
|
|
'logging' => [
|
|
|
|
'enabled' => env('LDAP_LOGGING', true),
|
|
|
|
'events' => [
|
|
|
|
\Adldap\Laravel\Events\Importing::class => \Adldap\Laravel\Listeners\LogImport::class,
|
|
\Adldap\Laravel\Events\Synchronized::class => \Adldap\Laravel\Listeners\LogSynchronized::class,
|
|
\Adldap\Laravel\Events\Synchronizing::class => \Adldap\Laravel\Listeners\LogSynchronizing::class,
|
|
\Adldap\Laravel\Events\Authenticated::class => \Adldap\Laravel\Listeners\LogAuthenticated::class,
|
|
\Adldap\Laravel\Events\Authenticating::class => \Adldap\Laravel\Listeners\LogAuthentication::class,
|
|
// phpcs:ignore Generic.Files.LineLength.TooLong
|
|
\Adldap\Laravel\Events\AuthenticationFailed::class => \Adldap\Laravel\Listeners\LogAuthenticationFailure::class,
|
|
// phpcs:ignore Generic.Files.LineLength.TooLong
|
|
\Adldap\Laravel\Events\AuthenticationRejected::class => \Adldap\Laravel\Listeners\LogAuthenticationRejection::class,
|
|
// phpcs:ignore Generic.Files.LineLength.TooLong
|
|
\Adldap\Laravel\Events\AuthenticationSuccessful::class => \Adldap\Laravel\Listeners\LogAuthenticationSuccess::class,
|
|
\Adldap\Laravel\Events\DiscoveredWithCredentials::class => \Adldap\Laravel\Listeners\LogDiscovery::class,
|
|
\Adldap\Laravel\Events\AuthenticatedWithWindows::class => \Adldap\Laravel\Listeners\LogWindowsAuth::class,
|
|
\Adldap\Laravel\Events\AuthenticatedModelTrashed::class => \Adldap\Laravel\Listeners\LogTrashedModel::class,
|
|
|
|
],
|
|
],
|
|
|
|
];
|