mirror of
https://github.com/lldap/lldap.git
synced 2026-03-31 15:07:48 +01:00
Update opnsense.md
Added instruction for using/not using Constraint Groups. This option is selected by default and the current instructions do not address it, but if it is left on and the Authentication Containers are not updated, the group sync will fail.
This commit is contained in:
@@ -92,6 +92,9 @@ Enable the following options on the OPNsense configuration page for your LLDAP s
|
|||||||
- Synchronize groups: `Checked`
|
- Synchronize groups: `Checked`
|
||||||
- Automatic user creation: `Checked`
|
- Automatic user creation: `Checked`
|
||||||
|
|
||||||
|
### Constraint Groups
|
||||||
|
This limits the groups to prevent injection attacks. If you want to enable this feature, you need to add ou=groups,dc=example,dc=com to the Authentication Containers field. Be sure to separate with a semicolon. Otherwise disable this option.
|
||||||
|
|
||||||
### Create OPNsense Group
|
### Create OPNsense Group
|
||||||
|
|
||||||
Go to `System > Access > Groups` and create a new group with the **same** name as the LLDAP group used to authenticate users for OPNsense.
|
Go to `System > Access > Groups` and create a new group with the **same** name as the LLDAP group used to authenticate users for OPNsense.
|
||||||
|
|||||||
Reference in New Issue
Block a user