photoprism/.ldap.cfg

debug = false
[behaviors]
  # Ignore all capabilities restrictions, for instance allowing every user to perform a search
  IgnoreCapabilities = true
[ldap]
  enabled = true
  listen = "0.0.0.0:389"
[ldaps]
  enabled = false
  listen = "0.0.0.0:636"
[api]
  enabled = true
  internals = true
  tls = false
  listen = "0.0.0.0:5555"
[backend]
  datastore = "config"
  baseDN = "dc=localssl,dc=dev"

[[users]]
  name = "user"
  givenname = "John"
  objectClass = "user"
  displayName = "John Doe"
  sn = "Doe"
  uidnumber = 5003
  primarygroup = 5501
  loginShell = "/bin/sh"
  otherGroups = [5505,5506,5507,5508]
  userPrincipalName = "jdoe@example.com"
  mail = "jdoe@example.com"
  passsha256 = "4314c1fe282face45336b1422a3285c5ff31a39c8e24425615fa53a43b718493"   # photoprism
    [[users.customattributes]]
    photoprismRole = ["user"]
    photoprismNoLogin = ["false"]
    photoprismWebdav = ["true"]
    [[users.capabilities]]
    action = "search"
    object = "*"

[[users]]
  name = "bob"
  givenname = "Bob"
  objectClass = "user"
  displayName = "Robert Jones"
  sn = "Jones"
  userPrincipalName = "bob@example.com"
  mail = "bob@example.com"
  uidnumber = 5005
  primarygroup = 5502
  loginShell = "/bin/bash"
  otherGroups = [5505,5506]
  passsha256 = "4314c1fe282face45336b1422a3285c5ff31a39c8e24425615fa53a43b718493"   # photoprism
    [[users.customattributes]]
    photoprismRoleUser = ["true"]
    photoprismNoLogin = ["false"]
    photoprismWebdav = ["true"]
    photoprismUploadPath = ["bob"]
    [[users.capabilities]]
    action = "search"
    object = "*"

[[users]]
  name = "guest"
  objectClass = "user"
  givenname = "Guest"
  displayName = "Guest User"
  userPrincipalName = "guest@example.com"
  mail = "guest@example.com"
  uidnumber = 5006
  primarygroup = 5503
  loginShell = "/bin/sh"
  otherGroups = [5505,5507]
  passsha256 = "4314c1fe282face45336b1422a3285c5ff31a39c8e24425615fa53a43b718493"   # photoprism
    [[users.customattributes]]
    photoprismRole = ["guest"]
    [[users.capabilities]]
    action = "search"
    object = "*"

[[users]]
  name = "uploader"
  givenname = "Uploader"
  objectClass = "user"
  displayName = "Uploader"
  sn = "Uploader"
  userPrincipalName = "uploader@example.com"
  mail = "uploader@example.com"
  uidnumber = 5007
  primarygroup = 5504
  loginShell = "/bin/bash"
  otherGroups = [5508]
  passsha256 = "4314c1fe282face45336b1422a3285c5ff31a39c8e24425615fa53a43b718493"   # photoprism
    [[users.customattributes]]
    photoprismUploadPath = ["bob"]
    [[users.capabilities]]
    action = "search"
    object = "*"

[[users]]
  name = "contributor"
  givenname = "Contributor"
  objectClass = "user"
  displayName = "Contributor"
  sn = "Contributor"
  userPrincipalName = "contributor@example.com"
  mail = "contributor@example.com"
  uidnumber = 5009
  primarygroup = 5509
  loginShell = "/bin/bash"
  otherGroups = [5508]
  passsha256 = "4314c1fe282face45336b1422a3285c5ff31a39c8e24425615fa53a43b718493"   # photoprism
    [[users.customattributes]]
    photoprismUploadPath = ["contrib"]
    [[users.capabilities]]
    action = "search"
    object = "*"

[[users]]
  name = "mail"
  objectClass = "user"
  givenname = "Mail"
  displayName = "Mail User"
  userPrincipalName = "mail@example.com"
  mail = "mail@example.com"
  uidnumber = 5507
  primarygroup = 5506
  loginShell = "/bin/nologin"
  otherGroups = [5505]
  passsha256 = "4314c1fe282face45336b1422a3285c5ff31a39c8e24425615fa53a43b718493"   # photoprism
    [[users.capabilities]]
    action = "search"
    object = "*"

[[users]]
  name = "jan"
  givenname = "Jan"
  objectClass = "viewer"
  displayName = "Jan Doe"
  sn = "Doe"
  userPrincipalName = "jan@example.com"
  mail = "jan@example.com"
  uidnumber = 5010
  primarygroup = 5510
  loginShell = "/bin/bash"
  otherGroups = [5505]
  passsha256 = "4314c1fe282face45336b1422a3285c5ff31a39c8e24425615fa53a43b718493"   # photoprism
    [[users.customattributes]]
    photoprismRoleViewer = ["true"]
    photoprismNoLogin = ["false"]
    photoprismWebdav = ["true"]
    [[users.capabilities]]
    action = "search"
    object = "*"

[[users]]
  name = "anna"
  givenname = "Anna"
  objectClass = "contributor"
  displayName = "Anna Smith"
  sn = "Doe"
  userPrincipalName = "anna@example.com"
  mail = "anna@example.com"
  uidnumber = 5009
  primarygroup = 5509
  loginShell = "/bin/bash"
  otherGroups = [5505]
  passsha256 = "4314c1fe282face45336b1422a3285c5ff31a39c8e24425615fa53a43b718493"   # photoprism
    [[users.customattributes]]
    photoprismUploadPath = ["users/contributor-no-path"]
    photoprismRoleContributor = ["true"]
    photoprismNoLogin = ["false"]
    photoprismWebdav = ["true"]
    [[users.capabilities]]
    action = "search"
    object = "*"

[[users]]
  name = "paul"
  givenname = "Paul"
  objectClass = "guest"
  displayName = "Paul Smith"
  sn = "Smith"
  userPrincipalName = "paul@example.com"
  mail = "paul@example.com"
  uidnumber = 5003
  primarygroup = 5503
  loginShell = "/bin/bash"
  otherGroups = [5503]
  passsha256 = "4314c1fe282face45336b1422a3285c5ff31a39c8e24425615fa53a43b718493"   # photoprism
    [[users.customattributes]]
    photoprismRoleGuest = ["true"]
    photoprismNoLogin = ["false"]
    photoprismWebdav = ["true"]
    [[users.capabilities]]
    action = "search"
    object = "*"

[[users]]
  name = "carl"
  givenname = "Carl"
  objectClass = "contributor"
  displayName = "Carl Smith"
  sn = "Doe"
  userPrincipalName = "carl@example.com"
  mail = "carl@example.com"
  uidnumber = 5009
  primarygroup = 5509
  loginShell = "/bin/bash"
  otherGroups = [5505]
  passsha256 = "4314c1fe282face45336b1422a3285c5ff31a39c8e24425615fa53a43b718493"   # photoprism
    [[users.customattributes]]
    photoprismUploadPath = ["users/carl"]
    photoprismRoleContributor = ["true"]
    photoprismNoLogin = ["false"]
    photoprismWebdav = ["true"]
    [[users.capabilities]]
    action = "search"
    object = "*"

[[users]]
  name = "sven"
  givenname = "Sven"
  objectClass = "admin"
  displayName = "Sven Smith"
  sn = "Doe"
  userPrincipalName = "sven@example.com"
  mail = "sven@example.com"
  uidnumber = 5001
  primarygroup = 5501
  loginShell = "/bin/bash"
  otherGroups = [5501, 5508]
  passsha256 = "4314c1fe282face45336b1422a3285c5ff31a39c8e24425615fa53a43b718493"   # photoprism
    [[users.customattributes]]
    photoprismRoleAdmin = ["true"]
    photoprismNoLogin = ["false"]
    photoprismWebdav = ["true"]
    [[users.capabilities]]
    action = "search"
    object = "*"

[[users]]
  name = "max"
  givenname = "Max"
  objectClass = "admin"
  displayName = "Max Muller"
  sn = "Muller"
  userPrincipalName = "max@example.com"
  mail = "max@example.com"
  uidnumber = 5001
  primarygroup = 5501
  loginShell = "/bin/bash"
  otherGroups = [5501]
  passsha256 = "4314c1fe282face45336b1422a3285c5ff31a39c8e24425615fa53a43b718493"   # photoprism
    [[users.customattributes]]
    photoprismRoleAdmin = ["true"]
    photoprismNoLogin = ["false"]
    photoprismWebdav = ["false"]
    [[users.capabilities]]
    action = "search"
    object = "*"

[[groups]]
  name = "PhotoPrism-admin"
  gidnumber = 5501

[[groups]]
  name = "PhotoPrism-user"
  gidnumber = 5502

[[groups]]
  name = "PhotoPrism-guest"
  gidnumber = 5503

[[groups]]
   name = "PhotoPrism-uploader"
   gidnumber = 5504

[[groups]]
  name = "gmail"
  gidnumber = 5505

[[groups]]
  name = "email"
  gidnumber = 5506

[[groups]]
  name = "ssh"
  gidnumber = 5507

[[groups]]
  name = "PhotoPrism-webdav"
  gidnumber = 5508

[[groups]]
  name = "PhotoPrism-contributor"
  gidnumber = 5509

[[groups]]
  name = "PhotoPrism-viewer"
  gidnumber = 5510