ChibyX
2.0 KiB
Example config for Peertube
To set up LDAP authentification in Peertube, you need to install auth-ldap plugin in Plugins/Themes in administration settings.
LDAP server settings
Auth weight
100
URL
Enter URL or IP of your LLDAP server, starting with ldap:// or ldaps:// if you're using a secure protocol. Then specify port your LLDAP server uses.
Example:
ldap://127.0.0.1:3890
Toggle Insecure TLS if you're using plain LDAP, or keep untoggled if you're using LDAPS.
Path to LDAP Server Certificate Chain of Trust
Leave it blank if you're using plain LDAP.
Bind user settings
Bind DN
uid=admin,ou=people,dc=example,dc=com
You can create special bind user, but it should belong to group lldap_admin or lldap_strict_readonly.
Bind Password
Enter password for bind user you specified on previous step.
User search settings
Search base
ou=people,dc=example,dc=com
Search filter
(|(mail={{username}})(uid={{username}}))
Mail property
mail
Mail property index
0
Username property
uid
Groups settings
The following settings are mandatory.
Group base
ou=groups,dc=example,dc=com
Group filter
(member={{dn}})
Administrator group DN
cn=peertube_admins,ou=groups,dc=raft-server,dc=local
All users who belong to this group will be logged in with Administrator role.
Moderator group DN
cn=peertube_moderators,ou=groups,dc=raft-server,dc=local
All users who belong to this group will be logged in with Moderator role.
User group DN
cn=peertube users,ou=groups,dc=raft-server,dc=local
All users who belong to this group will be logged in with User role.
No group matched login
Toggle this box, so users who don't belong to any group specified in previous steps will be logged in with User role. Keep this box toggled off so users who don't belong to any group specified in previous steps will be refused from logging in.