LDAP Authentication Plugin for The Fascinator

This plugin allows authentication against an LDAP server for The fascinator platform.

Configuration

"authentication": {
	"type": "ldap",
	"ldap": {
		"baseURL": "ldap://localhost:389",
		"baseDN": "ou=people,o=Sample org,c=AU",
		"ldapSecurityPrincipal": "cn=JohnDoe,ou=Some Account,dc=sample,dc=edu,dc=au"
		"ldapSecurityCredentials": "******"
		"idAttribute": "uid"
	}
}

baseURL

The URL of the LDAP server.

baseDN

The base Distinguished Name to search under.

idAttribute

The name of the attribute for which the username will be searched under. This will be appended to the end of the baseDN when querying the LDAP server. Using the example configuration above the query string will be:

ou=people,o=Sample org,c=AU,uid=specifiedUsername

ldapSecurityPrincipal

The Security Principal of the service account used to bind to the LDAP server. (Leave empty to bind anonymously.)

ldapSecurityCredentials

Credentials for the service account used to bind to the LDAP server. (Leave empty to bind anonymously.)

** userAttributes **

Optional list of attributes that will be retrieved and added to the User object upon login. Leave unspecified if not needed.

** displayNameAttributes **

Optional list of attributes that will compose the display name, order matters. Leave unspecified if not needed.

** displayNameDelimiter **

Optional delimiter that will be used when composing the display name. Defaults to ' '. Leave unspecified if not needed.

** useSystemCredForAttributes **

Optional flag indicating the intention to use of system credential when retrieving user attributes. Defaults to false. Leave unspecified if not needed.