cst1/infrastructure
1
0
Fork 0
forked from DGNum/infrastructure
Code Pull requests Activity

chore(web02/cas): Patch cas-eleves settings

Browse source
This commit is contained in:
Tom Hubrecht 2025-04-03 13:55:34 +02:00
parent 723a3ac193
commit c20bf265ad
Signed by: thubrecht
SSH key fingerprint: SHA256:r+nK/SIcWlJ0zFZJGHtlAoRwq1Rm+WcKAm5ADYMoQPc
4 changed files with 26 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
REUSE.toml
View file

@ -20,7 +20,7 @@ precedence = "closest"
[[annotations]] [[annotations]]
SPDX-FileCopyrightText = "2024 Tom Hubrecht <tom.hubrecht@dgnum.eu>" SPDX-FileCopyrightText = "2024 Tom Hubrecht <tom.hubrecht@dgnum.eu>"
SPDX-License-Identifier = "EUPL-1.2" SPDX-License-Identifier = "EUPL-1.2"
path = ["machines/nixos/compute01/ds-fr/01-smtp-tls.patch", "machines/nixos/compute01/librenms/kanidm.patch", "machines/nixos/compute01/stirling-pdf/*.patch", "machines/nixos/vault01/k-radius/packages/01-python_path.patch", "machines/nixos/vault01/k-radius/packages/02-remove-noisy-logs.patch", "machines/nixos/web01/crabfit/*.patch", "machines/nixos/web02/cas-eleves/01-pytest-cas.patch", "patches/lix/01-disable-installChecks.patch", "patches/nixpkgs/01-pretalx-environment-file.patch", "patches/nixpkgs/03-crabfit-karla.patch", "patches/nixpkgs/05-netbird-relay.patch"] path = ["machines/nixos/compute01/ds-fr/01-smtp-tls.patch", "machines/nixos/compute01/librenms/kanidm.patch", "machines/nixos/compute01/stirling-pdf/*.patch", "machines/nixos/vault01/k-radius/packages/01-python_path.patch", "machines/nixos/vault01/k-radius/packages/02-remove-noisy-logs.patch", "machines/nixos/web01/crabfit/*.patch", "machines/nixos/web02/cas-eleves/01-pytest-cas.patch", "patches/lix/01-disable-installChecks.patch", "patches/nixpkgs/01-pretalx-environment-file.patch", "patches/nixpkgs/03-crabfit-karla.patch", "patches/nixpkgs/05-netbird-relay.patch", "patches/cas-eleves/01-ldap-settings.patch"]
precedence = "closest" precedence = "closest"
[[annotations]] [[annotations]]

1
default.nix
View file

@ -103,6 +103,7 @@ let
"patches/nixpkgs/01-pretalx-environment-file.patch" "patches/nixpkgs/01-pretalx-environment-file.patch"
"patches/nixpkgs/03-crabfit-karla.patch" "patches/nixpkgs/03-crabfit-karla.patch"
"patches/nixpkgs/05-netbird-relay.patch" "patches/nixpkgs/05-netbird-relay.patch"
"patches/cas-eleves/01-ldap-settings.patch"
]; ];
copyright = "2024 Tom Hubrecht <tom.hubrecht@dgnum.eu>"; copyright = "2024 Tom Hubrecht <tom.hubrecht@dgnum.eu>";
} }

20
patches/cas-eleves/01-ldap-settings.patch Normal file
View file

@ -0,0 +1,20 @@
diff --git i/app/settings.py w/app/settings.py
index 57ff8ac..56f2581 100644
--- i/app/settings.py
+++ w/app/settings.py
@@ -174,14 +174,8 @@ LOGGING = {
CAS_AUTH_CLASS = "cas_server.auth.LdapAuthUser"
CAS_LDAP_SERVER = ldap3.Server(
- credentials.get("LDAP_URI", "ldaps://ldap.spi.ens.fr:636"),
+ credentials.get("LDAP_URI", "ldap://ldap.spi.ens.fr:389"),
get_info=ldap3.ALL,
- tls=ldap3.Tls(
- validate=ssl.CERT_REQUIRED,
- version=ssl.PROTOCOL_TLSv1_1,
- ciphers="AES256-SHA:@SECLEVEL=0",
- ssl_options=[ssl.OP_LEGACY_SERVER_CONNECT],
- ),
)
CAS_LDAP_BASE_DN = "dc=spi,dc=ens,dc=fr"
CAS_LDAP_USER_QUERY = "(uid=%s)"

4
patches/default.nix
View file

@ -11,6 +11,10 @@ let
in in
{ {
cas-eleves = [
(local ./cas-eleves/01-ldap-settings.patch)
];
lix = [ lix = [
(local ./lix/01-disable-installChecks.patch) (local ./lix/01-disable-installChecks.patch)
]; ];