mirror of
https://github.com/bolkedebruin/rdpgw.git
synced 2026-03-29 15:06:36 +00:00
Add config items and checks
This commit is contained in:
@@ -45,6 +45,14 @@ template.
|
|||||||
```yaml
|
```yaml
|
||||||
# web server configuration.
|
# web server configuration.
|
||||||
Server:
|
Server:
|
||||||
|
# can be set to openid (default) and local. If openid is used rdpgw expects
|
||||||
|
# a configured openid provider, make sure to set caps.tokenauth to true. If local
|
||||||
|
# rdpgw connects to rdpgw-auth over a socket to verify users and password. Note:
|
||||||
|
# rdpgw-auth needs to be run as root or setuid in order to work
|
||||||
|
Authentication: openid
|
||||||
|
# The socket to connect to if using local auth. Ensure rdpgw auth is configured to
|
||||||
|
# use the same socket.
|
||||||
|
AuthSocket: /tmp/rdpgw-auth.sock
|
||||||
# disable TLS if termination happens somehwere else (e.g. a load balancer)
|
# disable TLS if termination happens somehwere else (e.g. a load balancer)
|
||||||
# Note: rdp connections over a gateway require TLS
|
# Note: rdp connections over a gateway require TLS
|
||||||
DisableTLS: false
|
DisableTLS: false
|
||||||
|
|||||||
@@ -189,6 +189,10 @@ func Load(configFile string) Configuration {
|
|||||||
if Conf.Server.Authentication == "local" && Conf.Server.DisableTLS {
|
if Conf.Server.Authentication == "local" && Conf.Server.DisableTLS {
|
||||||
log.Fatalf("basicauth=local and disabletls are mutually exclusive")
|
log.Fatalf("basicauth=local and disabletls are mutually exclusive")
|
||||||
}
|
}
|
||||||
|
|
||||||
|
if !Conf.Caps.TokenAuth && Conf.Server.Authentication == "openid" {
|
||||||
|
log.Fatalf("openid is configured but tokenauth disabled")
|
||||||
|
}
|
||||||
return Conf
|
return Conf
|
||||||
|
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user