OC_LOG_LEVEL
AUTH_BASIC_LOG_LEVEL | 1.0.0 | string | The log level. Valid values are: 'panic', 'fatal', 'error', 'warn', 'info', 'debug', 'trace'. | error |
AUTH_BASIC_DEBUG_ADDR | 1.0.0 | string | Bind address of the debug server, where metrics, health, config and debug endpoints will be exposed. | 127.0.0.1:9147 |
AUTH_BASIC_DEBUG_TOKEN | 1.0.0 | string | Token to secure the metrics endpoint. | `` |
AUTH_BASIC_DEBUG_PPROF | 1.0.0 | bool | Enables pprof, which can be used for profiling. | false |
AUTH_BASIC_DEBUG_ZPAGES | 1.0.0 | bool | Enables zpages, which can be used for collecting and viewing traces in-memory. | false |
AUTH_BASIC_GRPC_ADDR | 1.0.0 | string | The bind address of the GRPC service. | 127.0.0.1:9146 |
OC_GRPC_PROTOCOL
AUTH_BASIC_GRPC_PROTOCOL | 1.0.0 | string | The transport protocol of the GRPC service. | tcp |
OC_JWT_SECRET
AUTH_BASIC_JWT_SECRET | 1.0.0 | string | The secret to mint and validate jwt tokens. | `` |
OC_REVA_GATEWAY | 1.0.0 | string | The CS3 gateway endpoint. | eu.opencloud.api.gateway |
OC_GRPC_CLIENT_TLS_MODE | 1.0.0 | string | TLS mode for grpc connection to the go-micro based grpc services. Possible values are 'off', 'insecure' and 'on'. 'off': disables transport security for the clients. 'insecure' allows using transport security, but disables certificate verification (to be used with the autogenerated self-signed certificates). 'on' enables transport security, including server certificate verification. | `` |
OC_GRPC_CLIENT_TLS_CACERT | 1.0.0 | string | Path/File name for the root CA certificate (in PEM format) used to validate TLS server certificates of the go-micro based grpc services. | `` |
AUTH_BASIC_SKIP_USER_GROUPS_IN_TOKEN | 1.0.0 | bool | Disables the encoding of the user's group memberships in the reva access token. This reduces the token size, especially when users are members of a large number of groups. | false |
AUTH_BASIC_AUTH_MANAGER | 1.0.0 | string | The authentication manager to check if credentials are valid. Supported value is 'ldap'. | ldap |
OC_LDAP_URI
AUTH_BASIC_LDAP_URI | 1.0.0 | string | URI of the LDAP Server to connect to. Supported URI schemes are 'ldaps://' and 'ldap://' | ldaps://localhost:9235 |
OC_LDAP_CACERT
AUTH_BASIC_LDAP_CACERT | 1.0.0 | string | Path/File name for the root CA certificate (in PEM format) used to validate TLS server certificates of the LDAP service. If not defined, the root directory derives from $OC_BASE_DATA_PATH/idm. | /var/lib/opencloud/idm/ldap.crt |
OC_LDAP_INSECURE
AUTH_BASIC_LDAP_INSECURE | 1.0.0 | bool | Disable TLS certificate validation for the LDAP connections. Do not set this in production environments. | false |
OC_LDAP_BIND_DN
AUTH_BASIC_LDAP_BIND_DN | 1.0.0 | string | LDAP DN to use for simple bind authentication with the target LDAP server. | uid=reva,ou=sysusers,o=libregraph-idm |
OC_LDAP_BIND_PASSWORD
AUTH_BASIC_LDAP_BIND_PASSWORD | 1.0.0 | string | Password to use for authenticating the 'bind_dn'. | `` |
OC_LDAP_USER_BASE_DN
AUTH_BASIC_LDAP_USER_BASE_DN | 1.0.0 | string | Search base DN for looking up LDAP users. | ou=users,o=libregraph-idm |
OC_LDAP_GROUP_BASE_DN
AUTH_BASIC_LDAP_GROUP_BASE_DN | 1.0.0 | string | Search base DN for looking up LDAP groups. | ou=groups,o=libregraph-idm |
OC_LDAP_USER_SCOPE
AUTH_BASIC_LDAP_USER_SCOPE | 1.0.0 | string | LDAP search scope to use when looking up users. Supported values are 'base', 'one' and 'sub'. | sub |
OC_LDAP_GROUP_SCOPE
AUTH_BASIC_LDAP_GROUP_SCOPE | 1.0.0 | string | LDAP search scope to use when looking up groups. Supported values are 'base', 'one' and 'sub'. | sub |
OC_LDAP_USER_FILTER
AUTH_BASIC_LDAP_USER_FILTER | 1.0.0 | string | LDAP filter to add to the default filters for user search like '(objectclass=openCloudUser)'. | `` |
OC_LDAP_GROUP_FILTER
AUTH_BASIC_LDAP_GROUP_FILTER | 1.0.0 | string | LDAP filter to add to the default filters for group searches. | `` |
OC_LDAP_USER_OBJECTCLASS
AUTH_BASIC_LDAP_USER_OBJECTCLASS | 1.0.0 | string | The object class to use for users in the default user search filter ('inetOrgPerson'). | inetOrgPerson |
OC_LDAP_GROUP_OBJECTCLASS
AUTH_BASIC_LDAP_GROUP_OBJECTCLASS | 1.0.0 | string | The object class to use for groups in the default group search filter ('groupOfNames'). | groupOfNames |
LDAP_LOGIN_ATTRIBUTES
AUTH_BASIC_LDAP_LOGIN_ATTRIBUTES | 1.0.0 | []string | A list of user object attributes that can be used for login. See the Environment Variable Types description for more details. | [uid] |
OC_URL
OC_OIDC_ISSUER
AUTH_BASIC_IDP_URL | 1.0.0 | string | The identity provider value to set in the userids of the CS3 user objects for users returned by this user provider. | https://localhost:9200 |
OC_LDAP_DISABLE_USER_MECHANISM
AUTH_BASIC_DISABLE_USER_MECHANISM | 1.0.0 | string | An option to control the behavior for disabling users. Valid options are 'none', 'attribute' and 'group'. If set to 'group', disabling a user via API will add the user to the configured group for disabled users, if set to 'attribute' this will be done in the ldap user entry, if set to 'none' the disable request is not processed. | attribute |
OC_LDAP_DISABLED_USERS_GROUP_DN
AUTH_BASIC_DISABLED_USERS_GROUP_DN | 1.0.0 | string | The distinguished name of the group to which added users will be classified as disabled when 'disable_user_mechanism' is set to 'group'. | cn=DisabledUsersGroup,ou=groups,o=libregraph-idm |
OC_LDAP_USER_SCHEMA_ID
AUTH_BASIC_LDAP_USER_SCHEMA_ID | 1.0.0 | string | LDAP Attribute to use as the unique ID for users. This should be a stable globally unique ID like a UUID. | openCloudUUID |
OC_LDAP_USER_SCHEMA_TENANT_ID
AUTH_BASIC_LDAP_USER_SCHEMA_TENANT_ID | 4.0.0 | string | LDAP Attribute to use for the tenant ID of users. This is used to identify the tenant of a user in a multi-tenant environment. | `` |
OC_LDAP_USER_SCHEMA_ID_IS_OCTETSTRING
AUTH_BASIC_LDAP_USER_SCHEMA_ID_IS_OCTETSTRING | 1.0.0 | bool | Set this to true if the defined 'ID' attribute for users is of the 'OCTETSTRING' syntax. This is e.g. required when using the 'objectGUID' attribute of Active Directory for the user IDs. | false |
OC_LDAP_USER_SCHEMA_MAIL
AUTH_BASIC_LDAP_USER_SCHEMA_MAIL | 1.0.0 | string | LDAP Attribute to use for the email address of users. | mail |
OC_LDAP_USER_SCHEMA_DISPLAYNAME
AUTH_BASIC_LDAP_USER_SCHEMA_DISPLAYNAME | 1.0.0 | string | LDAP Attribute to use for the displayname of users. | displayname |
OC_LDAP_USER_SCHEMA_USERNAME
AUTH_BASIC_LDAP_USER_SCHEMA_USERNAME | 1.0.0 | string | LDAP Attribute to use for username of users. | uid |
OC_LDAP_USER_ENABLED_ATTRIBUTE
AUTH_BASIC_LDAP_USER_ENABLED_ATTRIBUTE | 1.0.0 | string | LDAP attribute to use as a flag telling if the user is enabled or disabled. | openCloudUserEnabled |
OC_LDAP_GROUP_SCHEMA_ID
AUTH_BASIC_LDAP_GROUP_SCHEMA_ID | 1.0.0 | string | LDAP Attribute to use as the unique id for groups. This should be a stable globally unique id (e.g. a UUID). | openCloudUUID |
OC_LDAP_GROUP_SCHEMA_ID_IS_OCTETSTRING
AUTH_BASIC_LDAP_GROUP_SCHEMA_ID_IS_OCTETSTRING | 1.0.0 | bool | Set this to true if the defined 'id' attribute for groups is of the 'OCTETSTRING' syntax. This is e.g. required when using the 'objectGUID' attribute of Active Directory for the group IDs. | false |
OC_LDAP_GROUP_SCHEMA_MAIL
AUTH_BASIC_LDAP_GROUP_SCHEMA_MAIL | 1.0.0 | string | LDAP Attribute to use for the email address of groups (can be empty). | mail |
OC_LDAP_GROUP_SCHEMA_DISPLAYNAME
AUTH_BASIC_LDAP_GROUP_SCHEMA_DISPLAYNAME | 1.0.0 | string | LDAP Attribute to use for the displayname of groups (often the same as groupname attribute). | cn |
OC_LDAP_GROUP_SCHEMA_GROUPNAME
AUTH_BASIC_LDAP_GROUP_SCHEMA_GROUPNAME | 1.0.0 | string | LDAP Attribute to use for the name of groups. | cn |
OC_LDAP_GROUP_SCHEMA_MEMBER
AUTH_BASIC_LDAP_GROUP_SCHEMA_MEMBER | 1.0.0 | string | LDAP Attribute that is used for group members. | member |
AUTH_BASIC_OWNCLOUDSQL_DB_USERNAME | 1.0.0 | string | Database user to use for authenticating with the owncloud database. | owncloud |
AUTH_BASIC_OWNCLOUDSQL_DB_PASSWORD | 1.0.0 | string | Password for the database user. | `` |
AUTH_BASIC_OWNCLOUDSQL_DB_HOST | 1.0.0 | string | Hostname of the database server. | mysql |
AUTH_BASIC_OWNCLOUDSQL_DB_PORT | 1.0.0 | int | Network port to use for the database connection. | 3306 |
AUTH_BASIC_OWNCLOUDSQL_DB_NAME | 1.0.0 | string | Name of the owncloud database. | owncloud |
AUTH_BASIC_OWNCLOUDSQL_IDP | 1.0.0 | string | The identity provider value to set in the userids of the CS3 user objects for users returned by this user provider. | https://localhost:9200 |
AUTH_BASIC_OWNCLOUDSQL_NOBODY | 1.0.0 | int64 | Fallback number if no numeric UID and GID properties are provided. | 90 |
AUTH_BASIC_OWNCLOUDSQL_JOIN_USERNAME | 1.0.0 | bool | Join the user properties table to read usernames | false |
AUTH_BASIC_OWNCLOUDSQL_JOIN_OWNCLOUD_UUID | 1.0.0 | bool | Join the user properties table to read user ID's. | false |