Simon Smith
Simon Smith
@nmmclwhitehead yes this was my understanding when i started to look into it, i just couldnt get my authentik to play nicely with the `relaystate` and pass the values correctly!
Try changing `agentping` and `browserping` to `agentpong` and `browserpong` Using ping basically send a packet every x seconds and expects the packets to reply with a pong, if it doesn't...
this is already possible, when you create/edit a user click the server rights, and tick `no new device groups` and `no new devices` and if you fancy `no tools (meshcmd/router)`
im not 100% sure how the LDAP works as i dont use it, but i think it can yes, let me check and come back to you if i remember...
``` "newAccountsRights": [ "nonewgroups", "nonewdevices", "notools" ], ``` add this to your `domains` section in config.json then u will unfortunately have to delete the users, and let them relogin and...
the settings arent missing, they just dont exist for user groups the `nonewgroups,notools,usergroups` are server features! so generally you would specify what permission each user would have to your server,...
> Thanks for the info. I miss the note in meshcentral-config-schema.json dont worry about it! the is actually no description in the schema file for these options! so we should...
ill put it on my to-do list to add the description in (the github assigned column really haha) in theory LDAP uses a static user identifier - `user/authentikldap/akadmin` (my example,...
sorry for delay, you can add `manageAllDeviceGroups: ['adminusername']` under `domains`, this gives that user full admin rights to other device groups created by other users within ur domain 👍
you have used the wrong brackets, they should be `[ ]` and NOT `{ }`