Awesome
Let's Chat - Kerberos Plugin
Add Kerberos authentication to Let's Chat.
Installation
Prerequisites
Mac
Kerberos headers are shipped with Mac OS X.
Linux
You'll need to install the Kerberos 5 development headers package. It may be called krb5-dev
or libkrb5-dev
.
Windows
You'll need to install MIT Kerberos for Windows (with SDK option checked).
This module depends on node-krb5, so installation instructions for that module should be taken into account. On Windows you must set the environment variable MITKRB5 to the MIT Kerberos home.
set MITKRB5=C:\Program Files\MIT\Kerberos
Install
npm install lets-chat-ldap
npm install lets-chat-kerberos
Configure
YAML
Add (and customize) these settings to your settings.yml
file:
auth:
kerberos:
realm: example.com
use_ldap_authorization: false
# if use_ldap_authorization == true
ldap:
connect_settings:
url: ldap://example.com
tlsOptions:
ca: ca.pem
bind_options:
bindDN:
bindCredentials:
search:
base:
opts:
scope: one
filter: (uid={{username}})
field_mappings:
uid: uid # LDAP unique ID
username: uid # used for mention (@uid)
firstName: givenName
lastName: sn
displayName: givenName
email: mail
Environment Variables
Alternatively, configure using environment variables:
YAML Path | Env Variable |
---|---|
LCB_AUTH_KERBEROS_REALM | |
LCB_AUTH_KERBEROS_USE_LDAP_AUTHORIZATION | |
LCB_AUTH_KERBEROS_LDAP_CONNECT_SETTINGS_URL | |
LCB_AUTH_KERBEROS_LDAP_CONNECT_SETTINGS_TLS_OPTIONS_CA | |
LCB_AUTH_KERBEROS_LDAP_BIND_OPTIONS_BIND_DN | |
LCB_AUTH_KERBEROS_LDAP_BIND_OPTIONS_BIND_CREDENTIALS | |
LCB_AUTH_KERBEROS_LDAP_SEARCH_BASE | |
LCB_AUTH_KERBEROS_LDAP_SEARCH_OPTS_SCOPE | |
LCB_AUTH_KERBEROS_LDAP_SEARCH_OPTS_FILTER | |
LCB_AUTH_KERBEROS_LDAP_FIELD_MAPPINGS_UID | |
LCB_AUTH_KERBEROS_LDAP_FIELD_MAPPINGS_USERNAME | |
LCB_AUTH_KERBEROS_LDAP_FIELD_MAPPINGS_FIRST_NAME | |
LCB_AUTH_KERBEROS_LDAP_FIELD_MAPPINGS_LAST_NAME | |
LCB_AUTH_KERBEROS_LDAP_FIELD_MAPPINGS_DISPLAY_NAME | |
LCB_AUTH_KERBEROS_LDAP_FIELD_MAPPINGS_EMAIL |