| | |
|---|
| | | "authenticationFilter" : { |
|---|
| | | // Indicates whether the filter should allow HTTP BASIC authentication. |
|---|
| | | "supportHTTPBasicAuthentication" : true, |
|---|
| | | |
|---|
| | | |
|---|
| | | // Indicates whether the filter should allow alternative authentication |
|---|
| | | // and, if so, which HTTP headers it should obtain the username and |
|---|
| | | // password from. |
|---|
| | | "supportAltAuthentication" : true, |
|---|
| | | "supportAltAuthentication" : true, |
|---|
| | | "altAuthenticationUsernameHeader" : "X-OpenIDM-Username", |
|---|
| | | "altAuthenticationPasswordHeader" : "X-OpenIDM-Password", |
|---|
| | | |
|---|
| | | |
|---|
| | | // The search parameters to use for "search-simple" authentication. The |
|---|
| | | // %s filter format parameters will be substituted with the |
|---|
| | | // client-provided username, using LDAP filter string character escaping. |
|---|
| | | "searchBaseDN" : "ou=people,dc=example,dc=com", |
|---|
| | | "searchScope" : "sub", // Or "one". |
|---|
| | | "searchFilterTemplate" : "(&(objectClass=inetOrgPerson)(uid=%s))" |
|---|
| | | |
|---|
| | | "searchFilterTemplate" : "(&(uid=%s)(objectClass=inetOrgPerson))" |
|---|
| | | |
|---|
| | | // TODO: support for HTTP sessions? |
|---|
| | | }, |
|---|
| | | |
|---|
