config.php

...  

'ApacheSecureAuth' => array (
    'apacheEnv' => 'REDIRECT_REMOTE_USER', # Eventuelt REMOTE_USER
    'ldapServer' => 'ldap://ad.example.com',
    'starttls' => true, # kommer i 2.4.169, burde fortsatt kunne bli med
    'updateUser' => false,
    'ldapProtocol' => 3,
    'ldapNetworkTimeout' => -1,
    'ldapReaderUser' => 'CN=srv_misp,OU=Service Users,DC=example,DC=com',
    'ldapReaderPassword' => 'eew5Shiegheevua5iz9rohvi',
    'ldapDN' => 'dc=example,dc=com',
    'ldapSearchFilter' => '(memberof:1.2.840.113556.1.4.1941:=CN=R_MISP Access,OU=MISP,OU=Access Groups,DC=example,DC=com)',
    'ldapSearchAttribut' => 'samaccountname', # Atributten som kommer i REDIRECT_REMOTE_USER/REMOTE_USER
    'ldapFilter' =>
    array (
      0 => 'mail', # Request both mail and userprincipalname since we need them for ldapEmailField
      1 => 'userprincipalname',
    ),
    'ldapDefaultRoleId' => 3, # Make Users as default
    'ldapDefaultOrg' => '2', # Put users into org ID 2 by default
    'ldapAllowReferrals' => false,
    'ldapEmailField' =>
    array (
      0 => 'mail', # If user has mail attribute, use that as MISP email
      1 => 'userprincipalname', # If not, use userprincipalname as MISP email
    ),
  ),
  
...