2e5617c29b
* Adding TeamMember to system * Fixing all unit tests on the backend * Fixing merge conflicts * Fixing merge conflict * Adding javascript unit tests * Adding TeamMember to system * Fixing all unit tests on the backend * Fixing merge conflicts * Fixing merge conflict * Adding javascript unit tests * Adding client side unit test * Cleaning up the clint side tests * Fixing msg * Adding more client side unit tests * Adding more using tests * Adding last bit of client side unit tests and adding make cmd * Fixing bad merge * Fixing libraries * Updating to new client side API * Fixing borken unit test * Fixing unit tests * ugg...trying to beat gofmt * ugg...trying to beat gofmt * Cleaning up remainder of the server side routes * Adding inital load api * Increased coverage of webhook unit tests (#2660) * Adding loading ... to root html * Fixing bad merge * Removing explicit content type so superagent will guess corectly (#2685) * Fixing merge and unit tests * Adding create team UI * Fixing signup flows * Adding LDAP unit tests and enterprise unit test helper (#2702) * Add the ability to reset MFA from the commandline (#2706) * Fixing compliance unit tests * Fixing client side tests * Adding open server to system console * Moving websocket connection * Fixing unit test * Fixing unit tests * Fixing unit tests * Adding nickname and more LDAP unit tests (#2717) * Adding join open teams * Cleaning up all TODOs in the code * Fixing web sockets * Removing unused webockets file * PLT-2533 Add the ability to reset a user's MFA from the system console (#2715) * Add the ability to reset a user's MFA from the system console * Add client side unit test for adminResetMfa * Reorganizing authentication to fix LDAP error message (#2723) * Fixing failing unit test * Initial upgrade db code * Adding upgrade script * Fixing upgrade script after running on core * Update OAuth and Claim routes to work with user model changes (#2739) * Fixing perminant deletion. Adding ability to delete all user and the entire database (#2740) * Fixing team invite ldap login call (#2741) * Fixing bluebar and some img stuff * Fix all the different file upload web utils (#2743) * Fixing invalid session redirect (#2744) * Redirect on bad channel name (#2746) * Fixing a bunch of issue and removing dead code * Patch to fix error message on leave channel (#2747) * Setting EnableOpenServer to false by default * Fixing config * Fixing upgrade * Fixing reported bugs * Bug fixes for PLT-2057 * PLT-2563 Redo password recovery to use a database table (#2745) * Redo password recovery to use a database table * Update reset password audits * Split out admin and user reset password APIs to be separate * Delete password recovery when user is permanently deleted * Consolidate password resetting into a single function * Removed private channels as an option for outgoing webhooks (#2752) * PLT-2577/PLT-2552 Fixes for backstage (#2753) * Added URL to incoming webhook list * Fixed client functions for adding/removing integrations * Disallowed slash commands without trigger words * Fixed clientside handling of errors on AddCommand page * Minor auth cleanup (#2758) * Changed EditPostModal to just close if you save without making any changes (#2759) * Renamed client -> Client in async_client.jsx and fixed eslint warnings (#2756) * Fixed url in channel info modal (#2755) * Fixing reported issues * Moving to version 3 of the apis * Fixing command unit tests (#2760) * Adding team admins * Fixing DM issue * Fixing eslint error * Properly set EditPostModal's originalText state in all cases (#2762) * Update client config check to assume features is defined if server is licensed (#2772) * Fixing url link * Fixing issue with websocket crashing when sending messages to different teams
698 строки
35 KiB
JavaScript
698 строки
35 KiB
JavaScript
// Copyright (c) 2015 Mattermost, Inc. All Rights Reserved.
|
||
// See License.txt for license information.
|
||
|
||
import $ from 'jquery';
|
||
import ReactDOM from 'react-dom';
|
||
import Client from 'utils/web_client.jsx';
|
||
import * as Utils from 'utils/utils.jsx';
|
||
import * as AsyncClient from 'utils/async_client.jsx';
|
||
|
||
import {FormattedMessage, FormattedHTMLMessage} from 'react-intl';
|
||
import ConnectionSecurityDropdownSetting from './connection_security_dropdown_setting.jsx';
|
||
import BooleanSetting from './boolean_setting.jsx';
|
||
|
||
const DEFAULT_LDAP_PORT = 389;
|
||
const DEFAULT_QUERY_TIMEOUT = 60;
|
||
|
||
import React from 'react';
|
||
|
||
class LdapSettings extends React.Component {
|
||
constructor(props) {
|
||
super(props);
|
||
|
||
this.handleSubmit = this.handleSubmit.bind(this);
|
||
this.handleChange = this.handleChange.bind(this);
|
||
this.handleEnable = this.handleEnable.bind(this);
|
||
this.handleDisable = this.handleDisable.bind(this);
|
||
|
||
this.state = {
|
||
saveNeeded: false,
|
||
serverError: null,
|
||
enable: this.props.config.LdapSettings.Enable,
|
||
connectionSecurity: this.props.config.LdapSettings.ConnectionSecurity,
|
||
skipCertificateVerification: this.props.config.LdapSettings.SkipCertificateVerification
|
||
};
|
||
}
|
||
handleChange() {
|
||
this.setState({saveNeeded: true});
|
||
}
|
||
handleEnable() {
|
||
this.setState({saveNeeded: true, enable: true});
|
||
}
|
||
handleDisable() {
|
||
this.setState({saveNeeded: true, enable: false});
|
||
}
|
||
handleSubmit(e) {
|
||
e.preventDefault();
|
||
$('#save-button').button('loading');
|
||
|
||
const config = this.props.config;
|
||
config.LdapSettings.Enable = this.refs.Enable.checked;
|
||
config.LdapSettings.LdapServer = this.refs.LdapServer.value.trim();
|
||
|
||
let LdapPort = DEFAULT_LDAP_PORT;
|
||
if (!isNaN(parseInt(ReactDOM.findDOMNode(this.refs.LdapPort).value, 10))) {
|
||
LdapPort = parseInt(ReactDOM.findDOMNode(this.refs.LdapPort).value, 10);
|
||
}
|
||
config.LdapSettings.LdapPort = LdapPort;
|
||
|
||
config.LdapSettings.BaseDN = this.refs.BaseDN.value.trim();
|
||
config.LdapSettings.BindUsername = this.refs.BindUsername.value.trim();
|
||
config.LdapSettings.BindPassword = this.refs.BindPassword.value.trim();
|
||
config.LdapSettings.FirstNameAttribute = this.refs.FirstNameAttribute.value.trim();
|
||
config.LdapSettings.LastNameAttribute = this.refs.LastNameAttribute.value.trim();
|
||
config.LdapSettings.NicknameAttribute = this.refs.NicknameAttribute.value.trim();
|
||
config.LdapSettings.EmailAttribute = this.refs.EmailAttribute.value.trim();
|
||
config.LdapSettings.UsernameAttribute = this.refs.UsernameAttribute.value.trim();
|
||
config.LdapSettings.IdAttribute = this.refs.IdAttribute.value.trim();
|
||
config.LdapSettings.UserFilter = this.refs.UserFilter.value.trim();
|
||
config.LdapSettings.ConnectionSecurity = this.state.connectionSecurity.trim();
|
||
config.LdapSettings.SkipCertificateVerification = this.state.skipCertificateVerification;
|
||
config.LdapSettings.LoginFieldName = this.refs.LoginFieldName.value.trim();
|
||
config.LdapSettings.PasswordFieldName = this.refs.PasswordFieldName.value.trim();
|
||
|
||
let QueryTimeout = DEFAULT_QUERY_TIMEOUT;
|
||
if (!isNaN(parseInt(ReactDOM.findDOMNode(this.refs.QueryTimeout).value, 10))) {
|
||
QueryTimeout = parseInt(ReactDOM.findDOMNode(this.refs.QueryTimeout).value, 10);
|
||
}
|
||
config.LdapSettings.QueryTimeout = QueryTimeout;
|
||
|
||
Client.saveConfig(
|
||
config,
|
||
() => {
|
||
AsyncClient.getConfig();
|
||
this.setState({
|
||
serverError: null,
|
||
saveNeeded: false
|
||
});
|
||
$('#save-button').button('reset');
|
||
},
|
||
(err) => {
|
||
this.setState({
|
||
serverError: err.message,
|
||
saveNeeded: true
|
||
});
|
||
$('#save-button').button('reset');
|
||
}
|
||
);
|
||
}
|
||
render() {
|
||
let serverError = '';
|
||
if (this.state.serverError) {
|
||
serverError = <div className='form-group has-error'><label className='control-label'>{this.state.serverError}</label></div>;
|
||
}
|
||
|
||
let saveClass = 'btn';
|
||
if (this.state.saveNeeded) {
|
||
saveClass = 'btn btn-primary';
|
||
}
|
||
|
||
const licenseEnabled = global.window.mm_license.IsLicensed === 'true' && global.window.mm_license.LDAP === 'true';
|
||
|
||
let bannerContent;
|
||
if (licenseEnabled) {
|
||
bannerContent = (
|
||
<div className='banner'>
|
||
<div className='banner__content'>
|
||
<h4 className='banner__heading'>
|
||
<FormattedMessage
|
||
id='admin.ldap.bannerHeading'
|
||
defaultMessage='Note:'
|
||
/>
|
||
</h4>
|
||
<p>
|
||
<FormattedMessage
|
||
id='admin.ldap.bannerDesc'
|
||
defaultMessage='If a user attribute changes on the LDAP server it will be updated the next time the user enters their credentials to log in to Mattermost. This includes if a user is made inactive or removed from an LDAP server. Synchronization with LDAP servers is planned in a future release.'
|
||
/>
|
||
</p>
|
||
</div>
|
||
</div>
|
||
);
|
||
} else {
|
||
bannerContent = (
|
||
<div className='banner warning'>
|
||
<div className='banner__content'>
|
||
<FormattedHTMLMessage
|
||
id='admin.ldap.noLicense'
|
||
defaultMessage='<h4 class="banner__heading">Note:</h4><p>LDAP is an enterprise feature. Your current license does not support LDAP. Click <a href="http://mattermost.com"target="_blank">here</a> for information and pricing on enterprise licenses.</p>'
|
||
/>
|
||
</div>
|
||
</div>
|
||
);
|
||
}
|
||
|
||
return (
|
||
<div className='wrapper--fixed'>
|
||
{bannerContent}
|
||
<h3>
|
||
<FormattedMessage
|
||
id='admin.ldap.title'
|
||
defaultMessage='LDAP Settings'
|
||
/>
|
||
</h3>
|
||
<form
|
||
className='form-horizontal'
|
||
role='form'
|
||
>
|
||
<div className='form-group'>
|
||
<label
|
||
className='control-label col-sm-4'
|
||
htmlFor='Enable'
|
||
>
|
||
<FormattedMessage
|
||
id='admin.ldap.enableTitle'
|
||
defaultMessage='Enable Login With LDAP:'
|
||
/>
|
||
</label>
|
||
<div className='col-sm-8'>
|
||
<label className='radio-inline'>
|
||
<input
|
||
type='radio'
|
||
name='Enable'
|
||
value='true'
|
||
ref='Enable'
|
||
defaultChecked={this.props.config.LdapSettings.Enable}
|
||
onChange={this.handleEnable}
|
||
disabled={!licenseEnabled}
|
||
/>
|
||
<FormattedMessage
|
||
id='admin.ldap.true'
|
||
defaultMessage='true'
|
||
/>
|
||
</label>
|
||
<label className='radio-inline'>
|
||
<input
|
||
type='radio'
|
||
name='Enable'
|
||
value='false'
|
||
defaultChecked={!this.props.config.LdapSettings.Enable}
|
||
onChange={this.handleDisable}
|
||
/>
|
||
<FormattedMessage
|
||
id='admin.ldap.false'
|
||
defaultMessage='false'
|
||
/>
|
||
</label>
|
||
<p className='help-text'>
|
||
<FormattedMessage
|
||
id='admin.ldap.enableDesc'
|
||
defaultMessage='When true, Mattermost allows login using LDAP'
|
||
/>
|
||
</p>
|
||
</div>
|
||
</div>
|
||
<div className='form-group'>
|
||
<label
|
||
className='control-label col-sm-4'
|
||
htmlFor='LdapServer'
|
||
>
|
||
<FormattedMessage
|
||
id='admin.ldap.serverTitle'
|
||
defaultMessage='LDAP Server:'
|
||
/>
|
||
</label>
|
||
<div className='col-sm-8'>
|
||
<input
|
||
type='text'
|
||
className='form-control'
|
||
id='LdapServer'
|
||
ref='LdapServer'
|
||
placeholder={Utils.localizeMessage('admin.ldap.serverEx', 'Ex "10.0.0.23"')}
|
||
defaultValue={this.props.config.LdapSettings.LdapServer}
|
||
onChange={this.handleChange}
|
||
disabled={!this.state.enable}
|
||
/>
|
||
<p className='help-text'>
|
||
<FormattedMessage
|
||
id='admin.ldap.serverDesc'
|
||
defaultMessage='The domain or IP address of LDAP server.'
|
||
/>
|
||
</p>
|
||
</div>
|
||
</div>
|
||
<div className='form-group'>
|
||
<label
|
||
className='control-label col-sm-4'
|
||
htmlFor='LdapPort'
|
||
>
|
||
<FormattedMessage
|
||
id='admin.ldap.portTitle'
|
||
defaultMessage='LDAP Port:'
|
||
/>
|
||
</label>
|
||
<div className='col-sm-8'>
|
||
<input
|
||
type='number'
|
||
className='form-control'
|
||
id='LdapPort'
|
||
ref='LdapPort'
|
||
placeholder={Utils.localizeMessage('admin.ldap.portEx', 'Ex "389"')}
|
||
defaultValue={this.props.config.LdapSettings.LdapPort}
|
||
onChange={this.handleChange}
|
||
disabled={!this.state.enable}
|
||
/>
|
||
<p className='help-text'>
|
||
<FormattedMessage
|
||
id='admin.ldap.portDesc'
|
||
defaultMessage='The port Mattermost will use to connect to the LDAP server. Default is 389.'
|
||
/>
|
||
</p>
|
||
</div>
|
||
</div>
|
||
<ConnectionSecurityDropdownSetting
|
||
currentValue={this.state.connectionSecurity}
|
||
handleChange={(e) => this.setState({connectionSecurity: e.target.value, saveNeeded: true})}
|
||
isDisabled={!this.state.enable}
|
||
/>
|
||
<div className='form-group'>
|
||
<label
|
||
className='control-label col-sm-4'
|
||
htmlFor='BaseDN'
|
||
>
|
||
<FormattedMessage
|
||
id='admin.ldap.baseTitle'
|
||
defaultMessage='BaseDN:'
|
||
/>
|
||
</label>
|
||
<div className='col-sm-8'>
|
||
<input
|
||
type='text'
|
||
className='form-control'
|
||
id='BaseDN'
|
||
ref='BaseDN'
|
||
placeholder={Utils.localizeMessage('admin.ldap.baseEx', 'Ex "ou=Unit Name,dc=corp,dc=example,dc=com"')}
|
||
defaultValue={this.props.config.LdapSettings.BaseDN}
|
||
onChange={this.handleChange}
|
||
disabled={!this.state.enable}
|
||
/>
|
||
<p className='help-text'>
|
||
<FormattedMessage
|
||
id='admin.ldap.baseDesc'
|
||
defaultMessage='The Base DN is the Distinguished Name of the location where Mattermost should start its search for users in the LDAP tree.'
|
||
/>
|
||
</p>
|
||
</div>
|
||
</div>
|
||
<div className='form-group'>
|
||
<label
|
||
className='control-label col-sm-4'
|
||
htmlFor='BindUsername'
|
||
>
|
||
<FormattedMessage
|
||
id='admin.ldap.bindUserTitle'
|
||
defaultMessage='Bind Username:'
|
||
/>
|
||
</label>
|
||
<div className='col-sm-8'>
|
||
<input
|
||
type='text'
|
||
className='form-control'
|
||
id='BindUsername'
|
||
ref='BindUsername'
|
||
placeholder=''
|
||
defaultValue={this.props.config.LdapSettings.BindUsername}
|
||
onChange={this.handleChange}
|
||
disabled={!this.state.enable}
|
||
/>
|
||
<p className='help-text'>
|
||
<FormattedMessage
|
||
id='admin.ldap.bindUserDesc'
|
||
defaultMessage='The username used to perform the LDAP search. This should typically be an account created specifically for use with Mattermost. It should have access limited to read the portion of the LDAP tree specified in the BaseDN field.'
|
||
/>
|
||
</p>
|
||
</div>
|
||
</div>
|
||
<div className='form-group'>
|
||
<label
|
||
className='control-label col-sm-4'
|
||
htmlFor='BindPassword'
|
||
>
|
||
<FormattedMessage
|
||
id='admin.ldap.bindPwdTitle'
|
||
defaultMessage='Bind Password:'
|
||
/>
|
||
</label>
|
||
<div className='col-sm-8'>
|
||
<input
|
||
type='password'
|
||
className='form-control'
|
||
id='BindPassword'
|
||
ref='BindPassword'
|
||
placeholder=''
|
||
defaultValue={this.props.config.LdapSettings.BindPassword}
|
||
onChange={this.handleChange}
|
||
disabled={!this.state.enable}
|
||
/>
|
||
<p className='help-text'>
|
||
<FormattedMessage
|
||
id='admin.ldap.bindPwdDesc'
|
||
defaultMessage='Password of the user given in "Bind Username".'
|
||
/>
|
||
</p>
|
||
</div>
|
||
</div>
|
||
<div className='form-group'>
|
||
<label
|
||
className='control-label col-sm-4'
|
||
htmlFor='UserFilter'
|
||
>
|
||
<FormattedMessage
|
||
id='admin.ldap.userFilterTitle'
|
||
defaultMessage='User Filter:'
|
||
/>
|
||
</label>
|
||
<div className='col-sm-8'>
|
||
<input
|
||
type='text'
|
||
className='form-control'
|
||
id='UserFilter'
|
||
ref='UserFilter'
|
||
placeholder={Utils.localizeMessage('admin.ldap.userFilterEx', 'Ex. "(objectClass=user)"')}
|
||
defaultValue={this.props.config.LdapSettings.UserFilter}
|
||
onChange={this.handleChange}
|
||
disabled={!this.state.enable}
|
||
/>
|
||
<p className='help-text'>
|
||
<FormattedMessage
|
||
id='admin.ldap.userFilterDisc'
|
||
defaultMessage='Optionally enter an LDAP Filter to use when searching for user objects. Only the users selected by the query will be able to access Mattermost. For Active Directory, the query to filter out disabled users is (&(objectCategory=Person)(!(UserAccountControl:1.2.840.113556.1.4.803:=2))).'
|
||
/>
|
||
</p>
|
||
</div>
|
||
</div>
|
||
<div className='form-group'>
|
||
<label
|
||
className='control-label col-sm-4'
|
||
htmlFor='FirstNameAttribute'
|
||
>
|
||
<FormattedMessage
|
||
id='admin.ldap.firstnameAttrTitle'
|
||
defaultMessage='First Name Attrubute'
|
||
/>
|
||
</label>
|
||
<div className='col-sm-8'>
|
||
<input
|
||
type='text'
|
||
className='form-control'
|
||
id='FirstNameAttribute'
|
||
ref='FirstNameAttribute'
|
||
placeholder={Utils.localizeMessage('admin.ldap.firstnameAttrEx', 'Ex "givenName"')}
|
||
defaultValue={this.props.config.LdapSettings.FirstNameAttribute}
|
||
onChange={this.handleChange}
|
||
disabled={!this.state.enable}
|
||
/>
|
||
<p className='help-text'>
|
||
<FormattedMessage
|
||
id='admin.ldap.firstnameAttrDesc'
|
||
defaultMessage='The attribute in the LDAP server that will be used to populate the first name of users in Mattermost.'
|
||
/>
|
||
</p>
|
||
</div>
|
||
</div>
|
||
<div className='form-group'>
|
||
<label
|
||
className='control-label col-sm-4'
|
||
htmlFor='LastNameAttribute'
|
||
>
|
||
<FormattedMessage
|
||
id='admin.ldap.lastnameAttrTitle'
|
||
defaultMessage='Last Name Attribute:'
|
||
/>
|
||
</label>
|
||
<div className='col-sm-8'>
|
||
<input
|
||
type='text'
|
||
className='form-control'
|
||
id='LastNameAttribute'
|
||
ref='LastNameAttribute'
|
||
placeholder={Utils.localizeMessage('admin.ldap.lastnameAttrEx', 'Ex "sn"')}
|
||
defaultValue={this.props.config.LdapSettings.LastNameAttribute}
|
||
onChange={this.handleChange}
|
||
disabled={!this.state.enable}
|
||
/>
|
||
<p className='help-text'>
|
||
<FormattedMessage
|
||
id='admin.ldap.lastnameAttrDesc'
|
||
defaultMessage='The attribute in the LDAP server that will be used to populate the last name of users in Mattermost.'
|
||
/>
|
||
</p>
|
||
</div>
|
||
</div>
|
||
<div className='form-group'>
|
||
<label
|
||
className='control-label col-sm-4'
|
||
htmlFor='NicknameAttribute'
|
||
>
|
||
<FormattedMessage
|
||
id='admin.ldap.nicknameAttrTitle'
|
||
defaultMessage='Nickname Attribute:'
|
||
/>
|
||
</label>
|
||
<div className='col-sm-8'>
|
||
<input
|
||
type='text'
|
||
className='form-control'
|
||
id='NicknameAttribute'
|
||
ref='NicknameAttribute'
|
||
placeholder={Utils.localizeMessage('admin.ldap.nicknameAttrEx', 'Ex "nickname"')}
|
||
defaultValue={this.props.config.LdapSettings.NicknameAttribute}
|
||
onChange={this.handleChange}
|
||
disabled={!this.state.enable}
|
||
/>
|
||
<p className='help-text'>
|
||
<FormattedMessage
|
||
id='admin.ldap.nicknameAttrDesc'
|
||
defaultMessage='(Optional) The attribute in the LDAP server that will be used to populate the nickname of users in Mattermost.'
|
||
/>
|
||
</p>
|
||
</div>
|
||
</div>
|
||
<div className='form-group'>
|
||
<label
|
||
className='control-label col-sm-4'
|
||
htmlFor='EmailAttribute'
|
||
>
|
||
<FormattedMessage
|
||
id='admin.ldap.emailAttrTitle'
|
||
defaultMessage='Email Attribute:'
|
||
/>
|
||
</label>
|
||
<div className='col-sm-8'>
|
||
<input
|
||
type='text'
|
||
className='form-control'
|
||
id='EmailAttribute'
|
||
ref='EmailAttribute'
|
||
placeholder={Utils.localizeMessage('admin.ldap.emailAttrEx', 'Ex "mail" or "userPrincipalName"')}
|
||
defaultValue={this.props.config.LdapSettings.EmailAttribute}
|
||
onChange={this.handleChange}
|
||
disabled={!this.state.enable}
|
||
/>
|
||
<p className='help-text'>
|
||
<FormattedMessage
|
||
id='admin.ldap.emailAttrDesc'
|
||
defaultMessage='The attribute in the LDAP server that will be used to populate the email addresses of users in Mattermost.'
|
||
/>
|
||
</p>
|
||
</div>
|
||
</div>
|
||
<div className='form-group'>
|
||
<label
|
||
className='control-label col-sm-4'
|
||
htmlFor='UsernameAttribute'
|
||
>
|
||
<FormattedMessage
|
||
id='admin.ldap.usernameAttrTitle'
|
||
defaultMessage='Username Attribute:'
|
||
/>
|
||
</label>
|
||
<div className='col-sm-8'>
|
||
<input
|
||
type='text'
|
||
className='form-control'
|
||
id='UsernameAttribute'
|
||
ref='UsernameAttribute'
|
||
placeholder={Utils.localizeMessage('admin.ldap.usernameAttrEx', 'Ex "sAMAccountName"')}
|
||
defaultValue={this.props.config.LdapSettings.UsernameAttribute}
|
||
onChange={this.handleChange}
|
||
disabled={!this.state.enable}
|
||
/>
|
||
<p className='help-text'>
|
||
<FormattedMessage
|
||
id='admin.ldap.uernameAttrDesc'
|
||
defaultMessage='The attribute in the LDAP server that will be used to populate the username field in Mattermost. This may be the same as the ID Attribute.'
|
||
/>
|
||
</p>
|
||
</div>
|
||
</div>
|
||
<div className='form-group'>
|
||
<label
|
||
className='control-label col-sm-4'
|
||
htmlFor='IdAttribute'
|
||
>
|
||
<FormattedMessage
|
||
id='admin.ldap.idAttrTitle'
|
||
defaultMessage='Id Attribute: '
|
||
/>
|
||
</label>
|
||
<div className='col-sm-8'>
|
||
<input
|
||
type='text'
|
||
className='form-control'
|
||
id='IdAttribute'
|
||
ref='IdAttribute'
|
||
placeholder={Utils.localizeMessage('admin.ldap.idAttrEx', 'Ex "sAMAccountName"')}
|
||
defaultValue={this.props.config.LdapSettings.IdAttribute}
|
||
onChange={this.handleChange}
|
||
disabled={!this.state.enable}
|
||
/>
|
||
<p className='help-text'>
|
||
<FormattedMessage
|
||
id='admin.ldap.idAttrDesc'
|
||
defaultMessage='The attribute in the LDAP server that will be used as a unique identifier in Mattermost. It should be an LDAP attribute with a value that does not change, such as username or uid. If a user’s Id Attribute changes, it will create a new Mattermost account unassociated with their old one. This is the value used to log in to Mattermost in the "LDAP Username" field on the sign in page. Normally this attribute is the same as the “Username Attribute” field above. If your team typically uses domain\\username to sign in to other services with LDAP, you may choose to put domain\\username in this field to maintain consistency between sites.'
|
||
/>
|
||
</p>
|
||
</div>
|
||
</div>
|
||
<BooleanSetting
|
||
label={
|
||
<FormattedMessage
|
||
id='admin.ldap.skipCertificateVerification'
|
||
defaultMessage='Skip Certificate Verification'
|
||
/>
|
||
}
|
||
currentValue={this.state.skipCertificateVerification}
|
||
isDisabled={!this.state.enable}
|
||
handleChange={(e) => this.setState({skipCertificateVerification: e.target.value.trim() === 'true', saveNeeded: true})}
|
||
helpText={
|
||
<p className='help-text'>
|
||
<FormattedMessage
|
||
id='admin.ldap.skipCertificateVerificationDesc'
|
||
defaultMessage='Skips the certificate verification step for TLS or STARTTLS connections. Not recommended for production environments where TLS is required. For testing only.'
|
||
/>
|
||
</p>
|
||
}
|
||
/>
|
||
<div className='form-group'>
|
||
<label
|
||
className='control-label col-sm-4'
|
||
htmlFor='QueryTimeout'
|
||
>
|
||
<FormattedMessage
|
||
id='admin.ldap.queryTitle'
|
||
defaultMessage='Query Timeout (seconds):'
|
||
/>
|
||
</label>
|
||
<div className='col-sm-8'>
|
||
<input
|
||
type='number'
|
||
className='form-control'
|
||
id='QueryTimeout'
|
||
ref='QueryTimeout'
|
||
placeholder={Utils.localizeMessage('admin.ldap.queryEx', 'Ex "60"')}
|
||
defaultValue={this.props.config.LdapSettings.QueryTimeout}
|
||
onChange={this.handleChange}
|
||
disabled={!this.state.enable}
|
||
/>
|
||
<p className='help-text'>
|
||
<FormattedMessage
|
||
id='admin.ldap.queryDesc'
|
||
defaultMessage='The timeout value for queries to the LDAP server. Increase if you are getting timeout errors caused by a slow LDAP server.'
|
||
/>
|
||
</p>
|
||
</div>
|
||
</div>
|
||
|
||
<div className='form-group'>
|
||
<label
|
||
className='control-label col-sm-4'
|
||
htmlFor='LoginFieldName'
|
||
>
|
||
<FormattedMessage
|
||
id='admin.ldap.loginNameTitle'
|
||
defaultMessage='Login Field Name:'
|
||
/>
|
||
</label>
|
||
<div className='col-sm-8'>
|
||
<input
|
||
type='text'
|
||
className='form-control'
|
||
id='LoginFieldName'
|
||
ref='LoginFieldName'
|
||
placeholder={Utils.localizeMessage('admin.ldap.loginNameEx', 'Ex "LDAP Username"')}
|
||
defaultValue={this.props.config.LdapSettings.LoginFieldName}
|
||
onChange={this.handleChange}
|
||
disabled={!this.state.enable}
|
||
/>
|
||
<p className='help-text'>
|
||
<FormattedMessage
|
||
id='admin.ldap.loginNameDesc'
|
||
defaultMessage='The placeholder text that appears in the login field on the login page. Defaults to "LDAP Username".'
|
||
/>
|
||
</p>
|
||
</div>
|
||
</div>
|
||
|
||
<div className='form-group'>
|
||
<label
|
||
className='control-label col-sm-4'
|
||
htmlFor='PasswordFieldName'
|
||
>
|
||
<FormattedMessage
|
||
id='admin.ldap.passwordFieldTitle'
|
||
defaultMessage='Password Field Name:'
|
||
/>
|
||
</label>
|
||
<div className='col-sm-8'>
|
||
<input
|
||
type='text'
|
||
className='form-control'
|
||
id='PasswordFieldName'
|
||
ref='PasswordFieldName'
|
||
placeholder={Utils.localizeMessage('admin.ldap.passwordFieldEx', 'Ex "LDAP Password"')}
|
||
defaultValue={this.props.config.LdapSettings.PasswordFieldName}
|
||
onChange={this.handleChange}
|
||
disabled={!this.state.enable}
|
||
/>
|
||
<p className='help-text'>
|
||
<FormattedMessage
|
||
id='admin.ldap.passwordFieldDesc'
|
||
defaultMessage='The placeholder text that appears in the password field on the login page. Defaults to "LDAP Password".'
|
||
/>
|
||
</p>
|
||
</div>
|
||
</div>
|
||
|
||
<div className='form-group'>
|
||
<div className='col-sm-12'>
|
||
{serverError}
|
||
<button
|
||
disabled={!this.state.saveNeeded}
|
||
type='submit'
|
||
className={saveClass}
|
||
onClick={this.handleSubmit}
|
||
id='save-button'
|
||
data-loading-text={'<span class=\'glyphicon glyphicon-refresh glyphicon-refresh-animate\'></span> ' + Utils.localizeMessage('admin.ldap.saving', 'Saving Config...')}
|
||
>
|
||
<FormattedMessage
|
||
id='admin.ldap.save'
|
||
defaultMessage='Save'
|
||
/>
|
||
</button>
|
||
</div>
|
||
</div>
|
||
</form>
|
||
</div>
|
||
);
|
||
}
|
||
}
|
||
LdapSettings.defaultProps = {
|
||
};
|
||
|
||
LdapSettings.propTypes = {
|
||
config: React.PropTypes.object
|
||
};
|
||
|
||
export default LdapSettings;
|