FreeIPA: Difference between revisions
(Created page with "This is a cheatsheet of config for various apps to authenticate against FreeIPA.") |
No edit summary |
||
| Line 1: | Line 1: | ||
This is a cheatsheet of config for various apps to authenticate against FreeIPA. | This is a cheatsheet of config for various apps to authenticate against FreeIPA. | ||
==Emby== | |||
LDAP | |||
LDAP server address: | |||
127.0.0.1 | |||
LDAP server Port number: | |||
389 | |||
Enable SSL | |||
SSL certificate thumbprint (SHA1): | |||
Example: AAF4C61DDCC5E8A2DABEDE0F3B482CD9AEA9434D. Multiple thumbprints are accepted, comma delimted. | |||
Bind DN: | |||
uid=svc_emby,cn=users,cn=accounts,dc=ipa,dc=dbb | |||
Example: CN=user,OU=branch,DC=contoso,DC=local | |||
Bind credentials: | |||
Password1 | |||
Example: secret_password | |||
User search base: | |||
cn=users,cn=accounts,dc=ipa,dc=dbb | |||
Use to limit the LDAP users that can be imported into Emby. | |||
Example: DC=contoso,DC=local | |||
User search filter: | |||
(&(uid={0})(memberof=cn=emby_users,cn=groups,cn=accounts,dc=ipa,dc=dbb)(objectClass=person)(!(nsAccountLock=TRUE))) | |||
Example: (uid={0}) | |||
Important: This must contain {0} in order to allow specific user lookups. | |||
Revision as of 17:58, 12 December 2022
This is a cheatsheet of config for various apps to authenticate against FreeIPA.
Emby
LDAP LDAP server address: 127.0.0.1 LDAP server Port number: 389
Enable SSL SSL certificate thumbprint (SHA1): Example: AAF4C61DDCC5E8A2DABEDE0F3B482CD9AEA9434D. Multiple thumbprints are accepted, comma delimted. Bind DN: uid=svc_emby,cn=users,cn=accounts,dc=ipa,dc=dbb Example: CN=user,OU=branch,DC=contoso,DC=local Bind credentials: Password1 Example: secret_password User search base: cn=users,cn=accounts,dc=ipa,dc=dbb Use to limit the LDAP users that can be imported into Emby. Example: DC=contoso,DC=local User search filter: (&(uid={0})(memberof=cn=emby_users,cn=groups,cn=accounts,dc=ipa,dc=dbb)(objectClass=person)(!(nsAccountLock=TRUE))) Example: (uid={0}) Important: This must contain {0} in order to allow specific user lookups.