|
@@ -244,42 +244,46 @@
|
|
|
## authenticate_url=https://api.twitter.com/oauth/authorize
|
|
## authenticate_url=https://api.twitter.com/oauth/authorize
|
|
|
|
|
|
|
|
|
|
|
|
|
- ###########################################################################
|
|
|
|
|
- # Settings to configure SAML
|
|
|
|
|
- ###########################################################################
|
|
|
|
|
|
|
+###########################################################################
|
|
|
|
|
+# Settings to configure SAML
|
|
|
|
|
+###########################################################################
|
|
|
|
|
+
|
|
|
|
|
+[libsaml]
|
|
|
|
|
+ # Xmlsec1 binary path. This program should be executable by the user running Hue.
|
|
|
|
|
+ ## xmlsec_binary=/usr/local/bin/xmlsec1
|
|
|
|
|
|
|
|
- [libsaml]
|
|
|
|
|
- # Xmlsec1 binary path. This program should be executable by the user running Hue.
|
|
|
|
|
- ## xmlsec_binary=/usr/local/bin/xmlsec1
|
|
|
|
|
|
|
+ # Entity ID for Hue acting as service provider.
|
|
|
|
|
+ # Can also accept a pattern where '<base_url>' will be replaced with server URL base.
|
|
|
|
|
+ ## entity_id="<base_url>/saml2/metadata/"
|
|
|
|
|
|
|
|
- # Create users from SSO on login.
|
|
|
|
|
- ## create_users_on_login=true
|
|
|
|
|
|
|
+ # Create users from SSO on login.
|
|
|
|
|
+ ## create_users_on_login=true
|
|
|
|
|
|
|
|
- # Required attributes to ask for from IdP.
|
|
|
|
|
- # This requires a comma separated list.
|
|
|
|
|
- ## required_attributes=uid
|
|
|
|
|
|
|
+ # Required attributes to ask for from IdP.
|
|
|
|
|
+ # This requires a comma separated list.
|
|
|
|
|
+ ## required_attributes=uid
|
|
|
|
|
|
|
|
- # Optional attributes to ask for from IdP.
|
|
|
|
|
- # This requires a comma separated list.
|
|
|
|
|
- ## optional_attributes=
|
|
|
|
|
|
|
+ # Optional attributes to ask for from IdP.
|
|
|
|
|
+ # This requires a comma separated list.
|
|
|
|
|
+ ## optional_attributes=
|
|
|
|
|
|
|
|
- # IdP metadata in the form of a file. This is generally an XML file containing metadata that the Identity Provider generates.
|
|
|
|
|
- ## metadata_file=
|
|
|
|
|
|
|
+ # IdP metadata in the form of a file. This is generally an XML file containing metadata that the Identity Provider generates.
|
|
|
|
|
+ ## metadata_file=
|
|
|
|
|
|
|
|
- # Private key to encrypt metadata with.
|
|
|
|
|
- ## key_file=
|
|
|
|
|
|
|
+ # Private key to encrypt metadata with.
|
|
|
|
|
+ ## key_file=
|
|
|
|
|
|
|
|
- # Signed certificate to send along with encrypted metadata.
|
|
|
|
|
- ## cert_file=
|
|
|
|
|
|
|
+ # Signed certificate to send along with encrypted metadata.
|
|
|
|
|
+ ## cert_file=
|
|
|
|
|
|
|
|
- # A mapping from attributes in the response from the IdP to django user attributes.
|
|
|
|
|
- ## user_attribute_mapping={'uid':'username'}
|
|
|
|
|
|
|
+ # A mapping from attributes in the response from the IdP to django user attributes.
|
|
|
|
|
+ ## user_attribute_mapping={'uid':'username'}
|
|
|
|
|
|
|
|
- # Have Hue initiated authn requests be signed and provide a certificate.
|
|
|
|
|
- ## authn_requests_signed=false
|
|
|
|
|
|
|
+ # Have Hue initiated authn requests be signed and provide a certificate.
|
|
|
|
|
+ ## authn_requests_signed=false
|
|
|
|
|
|
|
|
- # Have Hue initiated logout requests be signed and provide a certificate.
|
|
|
|
|
- ## logout_requests_signed=false
|
|
|
|
|
|
|
+ # Have Hue initiated logout requests be signed and provide a certificate.
|
|
|
|
|
+ ## logout_requests_signed=false
|
|
|
|
|
|
|
|
###########################################################################
|
|
###########################################################################
|
|
|
# Settings to configure your Hadoop cluster.
|
|
# Settings to configure your Hadoop cluster.
|