|
|
|
@ -315,22 +315,13 @@ Devise.setup do |config|
|
|
|
|
|
# so you need to do it manually. For the users scope, it would be:
|
|
|
|
|
# config.omniauth_path_prefix = '/my_engine/users/auth'
|
|
|
|
|
|
|
|
|
|
# PAM: only look for email field
|
|
|
|
|
config.usernamefield = nil
|
|
|
|
|
config.emailfield = "email"
|
|
|
|
|
|
|
|
|
|
# authentication with pam possible
|
|
|
|
|
# if not enabled, all pam settings are ignored
|
|
|
|
|
#config.pam_authentication = true
|
|
|
|
|
# check if email is actually a username
|
|
|
|
|
config.check_at_sign = true
|
|
|
|
|
# suffix for email address generation (warning: without pam must provide email in the pam environment)
|
|
|
|
|
config.pam_default_suffix = "pam"
|
|
|
|
|
# name of the pam service
|
|
|
|
|
# pam "auth" section is evaluated
|
|
|
|
|
config.pam_default_service = "rpam"
|
|
|
|
|
# name of the pam service used for checking if an user can register
|
|
|
|
|
# pam "account" section is evaluated
|
|
|
|
|
# nil for allowing registration of pam names (not recommended)
|
|
|
|
|
config.pam_controlled_service = "rpam"
|
|
|
|
|
if ENV['PAM_ENABLED'] == 'true'
|
|
|
|
|
config.pam_authentication = true
|
|
|
|
|
config.usernamefield = nil
|
|
|
|
|
config.emailfield = 'email'
|
|
|
|
|
config.check_at_sign = true
|
|
|
|
|
config.pam_default_suffix = ENV.fetch('PAM_DEFAULT_SUFFIX') { nil }
|
|
|
|
|
config.pam_default_service = ENV.fetch('PAM_DEFAULT_SERVICE') { 'rpam' }
|
|
|
|
|
config.pam_controlled_service = ENV.fetch('PAM_CONTROLLED_SERVICE') { 'rpam' }
|
|
|
|
|
end
|
|
|
|
|
end
|
|
|
|
|