FreeIPA: Difference between revisions

Latest revision as of 18:04, 12 December 2022

This is a cheatsheet of config for various apps to authenticate against FreeIPA.

LDAP server address:

127.0.0.1

LDAP server Port number:

Bind DN:

uid=svc_emby,cn=users,cn=accounts,dc=ipa,dc=dbb

Bind credentials:

Password1

User search base:

cn=users,cn=accounts,dc=ipa,dc=dbb

User search filter:

(&(uid={0})(memberof=cn=emby_users,cn=groups,cn=accounts,dc=ipa,dc=dbb)(objectClass=person)(!(nsAccountLock=TRUE)))

@@ Line 4: / Line 4: @@
 ==Emby==
-LDAP
+LDAP server address:
-LDAP server address:
+ <nowiki>127.0.0.1</nowiki>
-.0.0.1
 LDAP server Port number:
+ <nowiki>389</nowiki>
-Enable SSL
-SSL certificate thumbprint (SHA1):
-Example: AAF4C61DDCC5E8A2DABEDE0F3B482CD9AEA9434D. Multiple thumbprints are accepted, comma delimted.
 Bind DN:
-uid=svc_emby,cn=users,cn=accounts,dc=ipa,dc=dbb
+ <nowiki>uid=svc_emby,cn=users,cn=accounts,dc=ipa,dc=dbb</nowiki>
-Example: CN=user,OU=branch,DC=contoso,DC=local
 Bind credentials:
-Password1
+ <nowiki>Password1</nowiki>
-Example: secret_password
 User search base:
-cn=users,cn=accounts,dc=ipa,dc=dbb
+ <nowiki>cn=users,cn=accounts,dc=ipa,dc=dbb</nowiki>
-Use to limit the LDAP users that can be imported into Emby.
-Example: DC=contoso,DC=local
 User search filter:
-(&(uid={0})(memberof=cn=emby_users,cn=groups,cn=accounts,dc=ipa,dc=dbb)(objectClass=person)(!(nsAccountLock=TRUE)))
+ <nowiki>(&(uid={0})(memberof=cn=emby_users,cn=groups,cn=accounts,dc=ipa,dc=dbb)(objectClass=person)(!(nsAccountLock=TRUE)))</nowiki>
-Example: (uid={0})
-Important: This must contain {0} in order to allow specific user lookups.