#
# Options regarding the NIPAP daemon
# ----------------------------------
#
[nipapd]

user = nipap
#group = nipap


listen = 127.0.0.1              ; IP address to listen on.
port = 1337                     ; XML-RPC listen port (change requires restart)

foreground = false              ; run in foreground, won't work with init script
debug = true                   ; enable debug logging

fork = 0                        ; number of forks
syslog = true                   ; log to syslog

pid_file = /var/run/nipap/nipapd.pid

db_host = ""            ; database hostname
db_port = 5432                  ; port that PostgreSQL listens to, defaults to
db_name = nipap                  ; database name
db_user = nipap                  ; database username
db_pass = xxxxx                  ; database password
db_sslmode = require            ; database SSL mode

#
# Options regarding the authentication backend
# --------------------------------------------
[auth]
default_backend = ldap                ; which backend to use by default
auth_cache_timeout = 3600              ; seconds cached auth entries are stored

# example backend with SQLite
[auth.backends.local]
type = SqliteAuth
db_path = /etc/nipap/local_auth.db     ; path to SQLite database used


#
[auth.backends.ldap]
type = LdapAuth
basedn = DC=INTERN,DC=COMPANY,DC=NET       ; base DN
uri = ldap://dc01.intern.company.net           ; LDAP server URI
#tls = False                            ; initiate TLS, use ldap://

search_binddn = uid=readonly,DC=INTERN,DC=COMPANY,DC=NET
search_password = S3Cr3T


# Active Directory (UPN) style
binddn_fmt = {}@INTERN.COMPANY.NET
search = sAMAccountName={}

#rw_group = CN=nipap_rw,DC=INTERN,DC=COMPANY,DC=NET      ; Users in this group get rw access
#ro_group = CN=nipap_ro,DC=INTERN,DC=COMPANY,DC=NET      ; Users in this group get ro access

# Options for the WWW UI
# ----------------------
#
[www]
xmlrpc_uri = http://nipap-www@local:S3Cr3T@127.0.0.1:1337
welcome_message = Welcome to NIPAP at COMPANY. Please login using your AD credentials.