[ldap]
  enabled = true
  listen = "0.0.0.0:3893"

[ldaps]
  enabled = false

[backend]
  datastore = "config"
  baseDN = "dc=zb,dc=local"

# ── Groups ──────────────────────────────────────────────────────────

[[groups]]
  name = "SCADA-Admins"
  gidnumber = 5501

[[groups]]
  name = "SCADA-Designers"
  gidnumber = 5502

[[groups]]
  name = "SCADA-Deploy-All"
  gidnumber = 5503

[[groups]]
  name = "SCADA-Deploy-SiteA"
  gidnumber = 5504

[[groups]]
  name = "SCADA-Viewers"
  gidnumber = 5505

# ── Users ───────────────────────────────────────────────────────────
# All test passwords: "password"
# SHA256 of "password": 5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8

[[users]]
  name = "admin"
  givenname = "Admin"
  sn = "User"
  mail = "admin@scadabridge.local"
  uidnumber = 5001
  primarygroup = 5501
  passsha256 = "5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8"
    [[users.capabilities]]
    action = "search"
    object = "*"

[[users]]
  name = "designer"
  givenname = "Designer"
  sn = "User"
  mail = "designer@scadabridge.local"
  uidnumber = 5002
  primarygroup = 5502
  passsha256 = "5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8"

[[users]]
  name = "deployer"
  givenname = "Deployer"
  sn = "User"
  mail = "deployer@scadabridge.local"
  uidnumber = 5003
  primarygroup = 5503
  passsha256 = "5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8"

[[users]]
  name = "site-deployer"
  givenname = "Site"
  sn = "Deployer"
  mail = "site-deployer@scadabridge.local"
  uidnumber = 5004
  primarygroup = 5504
  passsha256 = "5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8"

[[users]]
  name = "multi-role"
  givenname = "Multi"
  sn = "Role"
  mail = "multi-role@scadabridge.local"
  uidnumber = 5005
  primarygroup = 5501
  # Member of every role group so it resolves to all four ScadaBridge roles:
  # 5501 Admins→Administrator, 5502 Designers→Designer, 5503/5504 Deploy→Deployer, 5505 Viewers→Viewer
  othergroups = [5502, 5503, 5504, 5505]
  passsha256 = "5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8"