{% extends "base.html" %}
{% block body %}

<h3>LDAP Settings</h3><br>

<form action="{{ url_for('ldap_edit') }}" method="POST" role="form">
    <div class="form-group">
        <label for="LDAPURL">URL</label>
        <input name="url" type="url" class="form-control" id="LDAPURL" value="{{ url }}">
    </div>
    <div class="form-group">
        <label for="PathPart">Filter</label>
        <input name="path_part" type="text" class="form-control" id="PathPart" value="{{ path_part }}">
    </div>
    <div class="form-group">
        <label for="ConnectionString">Connection String</label>
        <input name="connection_string" type="text" class="form-control" id="ConnectionString"
               value="{{ connection_string }}">
    </div>
    <button type="submit" class="btn btn-default">Submit</button>
    <button type="submit" name="reset" class="btn btn-default">Disable LDAP</button>
</form>

<br><br>
<div style="font-size:120%">
    <div class="jumbotron">
        <b>URL</b>
        <ul>
            <li>ldap://example.com:389 -- a verified encrypted (TLS) connection;</li>
            <li>ldaps://example.com:636 -- an SSL connection.</li>
        </ul>
        <br>
        <b>Filter</b>
        <ul>
            <li>dc=example,dc=com??sub?(&(ou=mathematicians)(uniqueMember=uid=%s,dc=example,dc=com)) --
                could be empty, ePortal uses this filter to make a search after LDAP bind
                (if result is not empty, user is authorized).
            </li>
        </ul>
        <br>
        <b>Connection string (DN template)</b>
        <ul>
            <li>uid=%s,dc=example,dc=com -- must contain login placeholder (`%s`).</li>
        </ul>
        <br>
        <b>Use URL to adjust security and timeout parameters</b>
        <ul>
            <li>strict_check=0 -- to disable strict certificate check (enabled by default);</li>
            <li>tls=0 -- to disable TLS (enabled by default);</li>
            <li>timeout=30 (5 by default).</li>
        </ul>
        URL with security parameters: ldap://example.com?strict_check=0&timeout=30&tls=0
        <br><br>
        <b>Example of LDAP access configuration</b>
        <br><br>
        Here is
        <a href="https://www.forumsys.com/tutorials/integration-how-to/ldap/online-ldap-test-server/" target="_blank">
            a test LDAP server</a>.
        <br><br>
        To make any user to have an access provide URL and connection string:<br>
        <br><font face="monospace">URL:               ldap://ldap.forumsys.com</font>
        <br><font face="monospace">connection string: uid=%s,dc=example,dc=com</font>
        <br><br>
        To make users from "mathematicians" OU only to have an access provide URL, filter and connection string:
        <br>
        <br><font face="monospace">URL:               ldap://ldap.forumsys.com</font>
        <br><font
            face="monospace">filter:            dc=example,dc=com??sub?(&(ou=mathematicians)(uniqueMember=uid=%s,dc=example,dc=com))</font>
        <br><font face="monospace">connection string: uid=%s,dc=example,dc=com</font>
        <br><br>
        The following entry is searched to limit access for users in "mathematicians" OU using filter above:
        <ul>
            <li>base "dc=example,dc=com",</li>
            <li>"mathematicians" organization unit,</li>
            <li>contains "uniqueMember" property with DN of corresponding user.</li>
        </ul>
        Note that you could use "%s" in both connection string and filter as a placeholder for user login.
        <br><br>
        Each LDAP implementation has it's own peculiar properties,
        so we cannot provide any specific information about LDAP URL configuration,
        because it depends entirely on exact LDAP server configuration.
        <br><br>
        To retrieve more information, please, see
        <a href="https://tools.ietf.org/html/rfc2255" target="_blank">The LDAP URL Format RFC</a>.
        <br><br>If you have problems with configuring your LDAP access,
        please, contact our <a href="https://www.kernelcare.com/support/" target="_blank">support</a>.
    </div>
</div>

{% endblock %}