Awesome
ergo-ldap
This is an authentication plugin for Ergo that defers password checking to an LDAP server.
To build the plugin, install Go 1.14 or higher, then run make
; this will build an ergo-ldap
binary.
See example.yaml
for LDAP authentication options.
To configure Ergo to use this plugin, add a section like this to your accounts
block:
auth-script:
enabled: true
command: "/path/to/ergo-ldap"
# constant list of args to pass to the command; the actual authentication
# data is transmitted over stdin/stdout:
args: ["/path/to/ldap-config.yaml"]
# should we automatically create users if the plugin returns success?
autocreate: true
# timeout for process execution, after which we send a SIGTERM:
timeout: 9s
# how long after the SIGTERM before we follow up with a SIGKILL:
kill-timeout: 1s
You will most likely also want to set require-sasl: true
and accounts.registration.enabled: false
.