[ldap]
  enabled = true
  listen = "0.0.0.0:3893"

[ldaps]
  enabled = false

[backend]
  datastore = "config"
  baseDN = "dc=scadalink,dc=local"

# ── Groups ──────────────────────────────────────────────────────────

[[groups]]
  name = "SCADA-Admins"
  gidnumber = 5501

[[groups]]
  name = "SCADA-Designers"
  gidnumber = 5502

[[groups]]
  name = "SCADA-Deploy-All"
  gidnumber = 5503

[[groups]]
  name = "SCADA-Deploy-SiteA"
  gidnumber = 5504

# ── Users ───────────────────────────────────────────────────────────
# All test passwords: "password"
# SHA256 of "password": 5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8

[[users]]
  name = "admin"
  givenname = "Admin"
  sn = "User"
  mail = "admin@scadalink.local"
  uidnumber = 5001
  primarygroup = 5501
  passsha256 = "5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8"
    [[users.capabilities]]
    action = "search"
    object = "*"

[[users]]
  name = "designer"
  givenname = "Designer"
  sn = "User"
  mail = "designer@scadalink.local"
  uidnumber = 5002
  primarygroup = 5502
  passsha256 = "5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8"

[[users]]
  name = "deployer"
  givenname = "Deployer"
  sn = "User"
  mail = "deployer@scadalink.local"
  uidnumber = 5003
  primarygroup = 5503
  passsha256 = "5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8"

[[users]]
  name = "site-deployer"
  givenname = "Site"
  sn = "Deployer"
  mail = "site-deployer@scadalink.local"
  uidnumber = 5004
  primarygroup = 5504
  passsha256 = "5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8"

[[users]]
  name = "multi-role"
  givenname = "Multi"
  sn = "Role"
  mail = "multi-role@scadalink.local"
  uidnumber = 5005
  primarygroup = 5501
  othergroups = [5502, 5503]
  passsha256 = "5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8"