Files
2025-05-16 16:11:38 +02:00

89 lines
2.0 KiB
Markdown

# Example config for Peertube
To set up LDAP authentification in Peertube, you need to install `auth-ldap` plugin in `Plugins/Themes` in administration settings.
## LDAP server settings
### Auth weight
```
100
```
### URL
Enter URL or IP of your LLDAP server, starting with `ldap://` or `ldaps://` if you're using a secure protocol. Then specify port your LLDAP server uses.
Example:
```
ldap://127.0.0.1:3890
```
Toggle `Insecure TLS` if you're using plain LDAP, or keep untoggled if you're using LDAPS.
### Path to LDAP Server Certificate Chain of Trust
Leave it blank if you're using plain LDAP.
## Bind user settings
### Bind DN
```
uid=admin,ou=people,dc=example,dc=com
```
You can create special bind user, but it should belong to group `lldap_admin` or `lldap_strict_readonly`.
### Bind Password
Enter password for bind user you specified on previous step.
## User search settings
### Search base
```
ou=people,dc=example,dc=com
```
### Search filter
```
(|(mail={{username}})(uid={{username}}))
```
### Mail property
```
mail
```
### Mail property index
```
0
```
### Username property
```
uid
```
## Groups settings
The following settings are mandatory.
### Group base
```
ou=groups,dc=example,dc=com
```
### Group filter
```
(member={{dn}})
```
### Administrator group DN
```
cn=peertube_admins,ou=groups,dc=raft-server,dc=local
```
All users who belong to this group will be logged in with `Administrator` role.
### Moderator group DN
```
cn=peertube_moderators,ou=groups,dc=raft-server,dc=local
```
All users who belong to this group will be logged in with `Moderator` role.
### User group DN
```
cn=peertube users,ou=groups,dc=raft-server,dc=local
```
All users who belong to this group will be logged in with `User` role.
### No group matched login
Toggle this box, so users who don't belong to any group specified in previous steps will be logged in with `User` role. Keep this box toggled off so users who don't belong to any group specified in previous steps will be refused from logging in.