Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

...

SectionNameOriginal Value
Possible ValuesDescription
authenticationauth_crowd_password

<password>
authenticationauth_crowd_server

<ip>
authenticationauth_crowd_user

<username>
authenticationauth_expire_seconds3600
<integer>
authenticationauth_htpasswd_encryptcrypt
crypt, plaintext, apache-md5
authenticationauth_htpasswd_file<omk_conf>/users.dat
<relative filepath>
authenticationauth_lockout_after0
<integer>seconds, 0 for none.
authenticationauth_login_motdAuthentication required: default credentials are nmis/nm1888


authenticationauth_method_1htpasswd
htpasswd, openaudit, radias, tacacs, crowd, system, ldaps, ldap, ms-ldap, ms-ldaps, novell-ldap, connectwise, pam, openid_connectopenid_connect supported as at April 2021. See below.
authenticationauth_method_2

htpasswd, openaudit, radias, tacacs, crowd, system, ldaps, ldap, ms-ldap, ms-ldaps, novell-ldap, connectwise, pam, openid_connect
authenticationauth_method_3

htpasswd, openaudit, radias, tacacs, crowd, system, ldaps, ldap, ms-ldap, ms-ldaps, novell-ldap, connectwise, pam, openid_connect
authenticationauth_ms_ldap_attrsAMAccountName


authenticationauth_ms_ldap_baseCN=Users,DC=your_domain,DC=com
<ldap>
authenticationauth_ms_ldap_debugtrue
true, false
authenticationauth_ms_ldap_dn_accCN=Administrator,CN=Users,DC=your_domain,DC=com


authenticationauth_ms_ldap_dn_pswyour_administrator_password
<password>
authenticationauth_ms_ldap_groupCN=Users,DC=your_domain,DC=com
<ldap>
authenticationauth_ms_ldap_serveryour.ip.address.here
<ip>
authenticationauth_ms_ldaps_capathrequired


authenticationauth_ms_ldaps_serveryour.ip.address.here
<ip>
authenticationauth_ms_ldaps_verify



authenticationauth_sso_domain

<domain>

OKTA OpenID specific

SectionNameOriginal Value
Possible ValuesDescription
authenticationauth_method_1openid_connect

Set as per this entry to enable.
authentication → auth_openid_connecttypeokta

As at April 2021, only OKTA is tested and supported
authentication → auth_openid_connecturlhttps://YOUR_SUBDOMAIN.okta.com/oauth2/default/v1/token

You should replace YOUR_SUBDOMAIN with the subdomain provided by OKTA.
authentication → auth_openid_connectpasswordpassword

OKTA specific (do not change).
authentication → auth_openid_connecttest_errorerror_description

OKTA specific (do not change).
authentication → auth_openid_connecttest_successaccess_token

OKTA specific (do not change).
authentication → auth_openid_connectusernameusername

OKTA specific (do not change).
authentication → auth_openid_connect → postclient_idYOUR_CLIENT_ID

You should replace YOUR_CLIENT_ID with the client id provided by OKTA.
authentication → auth_openid_connect → postclient_secretYOUR_CLIENT_SECRET

You should replace YOUR_CLIENT_SECRET with the client secret provided by OKTA.
authentication → auth_openid_connect → postgrant_typepassword

OKTA specific (do not change).
authentication → auth_openid_connect → postscopeopenid

OKTA specific (do not change).
authentication → auth_openid_connect → postpassword


Do not set.
authentication → auth_openid_connect → postusername


Do not set.
authentication → auth_openid_connect → headersacceptapplication/json

OKTA specific (do not change).
authentication → auth_openid_connect → headerscontent_typeapplication/x-www-form-urlencoded

OKTA specific (do not change).

Core

Some core web application settings.

...