lib/identity: move to idm-ldap

This commit is contained in:
Max Headroom 2023-10-25 19:30:00 +02:00
parent 1754fc1048
commit 25b62a503e

View file

@ -12,16 +12,16 @@
server = with ldap.server; { server = with ldap.server; {
# TODO: unhardcode everything here # TODO: unhardcode everything here
protocol = "ldaps"; protocol = "ldaps";
hostname = "authsys.virtual-machines.${domain}"; hostname = "idm-ldap.internal.${domain}";
port = 636; port = 636;
url = "${protocol}://${connectionString}"; url = "${protocol}://${connectionString}";
connectionString = "${hostname}:${builtins.toString port}"; connectionString = "${hostname}:${builtins.toString port}";
}; };
accounts = with ldap.accounts; { accounts = with ldap.accounts; {
domainComponents = ldap.lib.convertDomain domain; domainComponents = ldap.lib.convertDomain domain;
uidAttribute = "uid"; uidAttribute = "name";
uidFilter = "(${uidAttribute}=%u)"; uidFilter = "(${uidAttribute}=%u)";
userSearchBase = "cn=users,cn=accounts,${domainComponents}"; userSearchBase = "${domainComponents}";
}; };
lib = { lib = {
convertDomain = domain: with builtins; lib.pipe domain [ convertDomain = domain: with builtins; lib.pipe domain [