sheppy/no-secrets-athq-ansible
1
0
Fork 0
mirror of https://github.com/FAUSheppy/no-secrets-athq-ansible synced 2025-12-07 17:01:36 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat: verifiedEmail LDAP support

Browse Source
This commit is contained in:
Johnathen Sheppard
2023-07-25 08:29:48 +00:00
parent af4d36523f
commit a7ee9ac405
2 changed files with 13 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
roles/usermanagement/files/verification.schema
View File

@@ -1,7 +1,7 @@
attributetype ( 1.2.6.1.4.1 attributetype ( 1.2.6.1.4.1
NAME 'emailVerified' NAME 'emailVerified'
EQUALITY booleanMatch EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE ) SINGLE-VALUE )
attributetype ( 1.2.6.1.4.2 attributetype ( 1.2.6.1.4.2
@@ -16,7 +16,7 @@
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
SINGLE-VALUE ) SINGLE-VALUE )
objectclass ( 1.2.6.1.4.100 NAME 'verfication' objectclass ( 1.2.6.1.4.100 NAME 'verification'
DESC 'Class for various verification states' DESC 'Class for various verification states'
SUP top SUP top
AUXILIARY AUXILIARY

11
roles/usermanagement/tasks/keycloak-ldap-provider.yaml
View File

@@ -23,7 +23,7 @@
usernameLDAPAttribute: uid usernameLDAPAttribute: uid
rdnLDAPAttribute: uid rdnLDAPAttribute: uid
uuidLDAPAttribute: entryUUID uuidLDAPAttribute: entryUUID
userObjectClasses: person, inetOrgPerson, organizationalPerson userObjectClasses: person, inetOrgPerson, organizationalPerson, verification
connectionUrl: "{{ ldap_connection_url }}" connectionUrl: "{{ ldap_connection_url }}"
usersDn: "{{ ldap_user_dn }}" usersDn: "{{ ldap_user_dn }}"
authType: simple authType: simple
@@ -102,6 +102,15 @@
read.only: true read.only: true
user.model.attribute: createTimestamp user.model.attribute: createTimestamp
ldap.attribute: createTimestamp ldap.attribute: createTimestamp
- name: "email_verified"
providerId: "user-attribute-ldap-mapper"
providerType: "org.keycloak.storage.ldap.mappers.LDAPStorageMapper"
config:
always.read.value.from.ldap: false
is.mandatory.in.ldap: false
read.only: false
user.model.attribute: emailVerified
ldap.attribute: emailVerified
- name: "group-mapper" - name: "group-mapper"
providerId: "group-ldap-mapper" providerId: "group-ldap-mapper"
providerType: "org.keycloak.storage.ldap.mappers.LDAPStorageMapper" providerType: "org.keycloak.storage.ldap.mappers.LDAPStorageMapper"