16 lines
1.2 KiB
YAML
16 lines
1.2 KiB
YAML
name: dashboard-auth-ldap
|
|
repo: https://github.com/angel12/hermes-ldap-auth
|
|
sha: 7b871ef375239275e29b1934bbed8ae7573afea3
|
|
description: "LDAP / Active Directory password login for the web dashboard. Verifies credentials with an LDAP bind (direct or search-then-bind), never stores passwords, requires ldaps:// or StartTLS, and supports group restriction. Registers the `ldap` dashboard auth provider once dashboard.ldap_auth is configured. Disclosure — dashboard logins are verified by binding to your configured LDAP/AD server with the user's password (TLS with certificate validation required unless allow_insecure is set); sessions are stateless HMAC tokens (12h access / 30d refresh by default) signed with HERMES_DASHBOARD_LDAP_SECRET or a random per-process key, and logout cannot revoke them; group removal and disabled accounts are not re-checked until the refresh token expires; failed logins count toward the directory's account-lockout policy."
|
|
maintainer: angel12
|
|
tier: community
|
|
category: general
|
|
requires_hermes: ">=0.21"
|
|
docs_url: https://github.com/angel12/hermes-ldap-auth#readme
|
|
version: "1.0.0"
|
|
capabilities:
|
|
provides_tools: []
|
|
provides_hooks: []
|
|
provides_middleware: []
|
|
requires_env: []
|