forked from ungleich-public/ungleich-user
Sajeyks
24fe2122b4
Sample entries from production show: - customers live in ou=customer (singular), not ou=customers - customers have gidNumber 10004 and staff 10002; uidNumbers are in the 10000s - staff entries list organizationalPerson and person explicitly - the servers serve ldaps:// on port 636 The app reads all of these from settings, so its behaviour is unchanged; the customer entry it creates already matches production attribute for attribute. The defaults and test setups were wrong: env.sample, the Kubernetes ConfigMap (now ldaps:// without StartTLS, gid 10004, start uid 10000), dev/env.dev and the dev LDAP seed now mirror production. The made-up ou=groups is gone. The tests take the customer DN and gidNumber from settings instead of hardcoding them.
32 lines
1 KiB
Text
32 lines
1 KiB
Text
# Local development settings for the dev LDAP container (docker-compose.dev.yml).
|
|
# Dev-only credentials, not secrets. Use with: cp dev/env.dev .env
|
|
|
|
LDAPSERVER="ldap://localhost:3389"
|
|
LDAP_ADMIN_DN="cn=admin,dc=ungleich,dc=ch"
|
|
LDAP_ADMIN_PASSWORD="admin"
|
|
|
|
LDAP_CUSTOMER_DN="ou=customer,dc=ungleich,dc=ch"
|
|
LDAP_CUSTOMER_GROUP_ID=10004
|
|
LDAP_DEFAULT_START_UID=10000
|
|
|
|
# Space separated list of search bases for users
|
|
LDAPSEARCH="ou=customer,dc=ungleich,dc=ch ou=users,dc=ungleich,dc=ch"
|
|
ENTIRE_SEARCH_BASE="dc=ungleich,dc=ch"
|
|
|
|
SECRET_KEY="dev-only-not-a-secret"
|
|
ALLOWED_HOSTS="localhost,127.0.0.1,testserver"
|
|
DEBUG=True
|
|
EMAIL_FROM_ADDRESS="noreply@example.com"
|
|
|
|
# OTP server: not run locally; tests mock HTTP calls to it.
|
|
ALLOWED_REALMS="ungleich-admin,ungleich-auth"
|
|
OTPSERVER="http://localhost:9999/"
|
|
ADMIN_SEED="JBSWY3DPEHPK3PXP"
|
|
ADMIN_NAME="dev"
|
|
ADMIN_REALM="ungleich-admin"
|
|
USER_REALM="ungleich-auth"
|
|
|
|
# Optional: use the dev PostgreSQL from docker-compose.dev.yml instead of SQLite
|
|
#DATABASE_HOST=localhost
|
|
#DATABASE_PORT=5433
|
|
#DATABASE_PASSWORD=dev-only
|