Skip to content
GitLab
Explore
Sign in
Primary navigation
Search or go to…
Project
A
ansible-warpzone
Manage
Activity
Members
Labels
Plan
Issues
Issue boards
Milestones
Code
Merge requests
Repository
Branches
Commits
Tags
Repository graph
Compare revisions
Deploy
Releases
Model registry
Monitor
Incidents
Analyze
Value stream analytics
Contributor analytics
Repository analytics
Model experiments
Help
Help
Support
GitLab documentation
Compare GitLab plans
Community forum
Contribute to GitLab
Provide feedback
Keyboard shortcuts
?
Snippets
Groups
Projects
Show more breadcrumbs
infrastruktur
ansible-warpzone
Commits
521f28a1
Commit
521f28a1
authored
1 year ago
by
Christian Elberfeld
Browse files
Options
Downloads
Patches
Plain Diff
Nextcloud Openid configuration
parent
35328f17
No related branches found
No related tags found
No related merge requests found
Changes
2
Hide whitespace changes
Inline
Side-by-side
Showing
2 changed files
testserver/docker_nextcloud/Documentation.md
+39
-0
39 additions, 0 deletions
testserver/docker_nextcloud/Documentation.md
testserver/docker_nextcloud/templates/oidc.config.php
+1
-1
1 addition, 1 deletion
testserver/docker_nextcloud/templates/oidc.config.php
with
40 additions
and
1 deletion
testserver/docker_nextcloud/Documentation.md
0 → 100644
+
39
−
0
View file @
521f28a1
# Nextcloud with OIDC Authentication via uffd
Uffd Reference: https://git.cccv.de/uffd
## Remarks and limitations
*
Only the numeric user id from uffd can be used in nextcloud.
*
The admin group in nextcloud is added/removed if the group nextcloud_admin is set in uffd
*
Groups must be created manually, groups are assigned and revoked on login
## Setup in Nextcloud
Nextcloud App: OpenID Connect Login (Category: Integration)
The App must be installed manually with the initial admin User or via occ command.
Configuration ist provided in the config file 'oidc.config.php'
https://apps.nextcloud.com/apps/oidc_login
https://github.com/pulsejet/nextcloud-oidc-login
## Setup in uffd
Create Groups:
-
nextcloud_access: General Access to Nextcloud
-
nextcloud_admin: This Group will be Mapped to the Group admin in Nextcloud
Create a Service / OAuth Client:
Only Users with goup nextcloud_access can access Nextcloud
Client-ID: nextcloud
Client-Secret: from file nextcloud_oidc_secret on the server
Redirect-URIs:
*
https://
<nextcloud
Server
Url
>
/index.php/apps/oidc_login/oidc
*
https://
<nextcloud
Server
Url
>
/apps/oidc_login/oidc
This diff is collapsed.
Click to expand it.
testserver/docker_nextcloud/templates/oidc.config.php
+
1
−
1
View file @
521f28a1
...
@@ -35,7 +35,7 @@ $CONFIG = array (
...
@@ -35,7 +35,7 @@ $CONFIG = array (
// Attribute map for OIDC response.
// Attribute map for OIDC response.
'oidc_login_attributes'
=>
array
(
'oidc_login_attributes'
=>
array
(
'id'
=>
'
sub
'
,
'id'
=>
'
preferred_username
'
,
'name'
=>
'name'
,
'name'
=>
'name'
,
'mail'
=>
'email'
,
'mail'
=>
'email'
,
'groups'
=>
'groups'
,
'groups'
=>
'groups'
,
...
...
This diff is collapsed.
Click to expand it.
Preview
0%
Loading
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Save comment
Cancel
Please
register
or
sign in
to comment