home-assistant: fix ldap provider
This commit is contained in:
parent
111dcceb47
commit
0852142e98
|
@ -36,23 +36,25 @@
|
|||
args =
|
||||
let
|
||||
ldap = config.security.ldap;
|
||||
sed = "${pkgs.gnused}/bin/sed";
|
||||
in
|
||||
[
|
||||
# https://github.com/bob1de/ldap-auth-sh/blob/master/examples/home-assistant.cfg
|
||||
(pkgs.writeText "config.cfg" /* shell */ ''
|
||||
ATTRS=${ldap.roleField}
|
||||
CLIENT=ldapsearch
|
||||
ATTRS="${ldap.userField}"
|
||||
CLIENT="ldapsearch"
|
||||
DEBUG=0
|
||||
FILTER="${ldap.groupFilter "home-assistant"}"
|
||||
NAME_ATTR="${ldap.userField}"
|
||||
SCOPE="base"
|
||||
SERVER=ldaps://${ldap.domainName}
|
||||
SERVER="ldaps://${ldap.domainName}"
|
||||
USERDN="uid=$(ldap_dn_escape "$username"),${ldap.userBaseDN}"
|
||||
BASEDN="$USERDN"
|
||||
|
||||
on_auth_success() {
|
||||
# print the meta entries for use in HA
|
||||
if [ ! -z "$NAME_ATTR" ]; then
|
||||
name=$(echo "$output" | sed -nr "s/^\s*$NAME_ATTR:\s*(.+)\s*\$/\1/Ip")
|
||||
name=$(echo "$output" | ${sed} -nr "s/^\s*$NAME_ATTR:\s*(.+)\s*\$/\1/Ip")
|
||||
[ -z "$name" ] || echo "name=$name"
|
||||
fi
|
||||
}
|
||||
|
|
Loading…
Reference in New Issue