Changes between Version 2 and Version 3 of ActiveDirectoryAuthPlugin

Timestamp:

Sep 15, 2009, 2:41:41 AM (15 years ago)

Author:

warren smith

Comment:

--

ActiveDirectoryAuthPlugin

@@ -35 +35 @@
 Follow the Trac documentation on how [http://trac.edgewall.org/search?q=TracPlugins to install Trac plugins]
 
-== Example ==
+== Examples ==
 
-Install
+All config options go under the [account-manager] config heading.  Options for this module are:
+
+{{{
+[account-manager]
+#to use this module with AccountManager, ADAuthStore must be enabled inside of AccountManager
+password_store = ADAuthStore
+#define the Active Directory host address here.  A port other than default is set as
+#hostname:port
+ad_server = adserver.example.com
+#the Active Directory's base DN to search from, this is likely just your domain
+base_dn = DC=example,DC=com
+#the user/password to search active directory from, it must be a valid
+#username/password inside of active directory
+bind_dn = ldapuser@example.com
+bind_passwd = ldapuserpassword
+#the DN (distinguishing name) for the group that contains users that can login to Trac
+#if this isn't specified then any valid user in active directory is accepted
+auth_group = CN=Alltechs,OU=Mail enabled groups,OU=Email,DC=serverplus,DC=com
+#the DN for the group that contains users that should have the TRAC_ADMIN
+#permission.  If this option is not given, no user groups will be give the
+#TRAC_ADMIN permission.  This this option is enabled you must specify the
+#UserExtensiblePermissionStore as the trac permission store, such as:
+#[trac]
+#permission_store = UserExtensiblePermissionStore
+admin_group = CN=Administration,DC=example,DC=com
+
+[trac]
+permission_store = UserExtensiblePermissionStore
+}}}
+
+If you are unsure of what the DNs for your groups are, you may want to download an LDAP browser to inspect your Active Directory schema to find out a group's DN.
 
 == Recent Changes ==