## Authorizations
# Uncomment out the merging for each environment that you'd like to include.
# You can also just copy and paste the tree (do not include the "authorizations") to each
# environment if you need something different per enviornment.
authorizations: &AUTHORIZATIONS
  allow_unauthenticated_bind: false
  # group_base: ou=groups,dc=test,dc=com
  ## Requires config.ldap_check_group_membership in devise.rb be true
  # Can have multiple values, must match all to be authorized
  # required_groups:
  #   # If only a group name is given, membership will be checked against "uniqueMember"
  #   - cn=admins,ou=groups,dc=test,dc=com
  #   - cn=users,ou=groups,dc=test,dc=com
  #   # If an array is given, the first element will be the attribute to check against, the second the group name
  #   - ["moreMembers", "cn=users,ou=groups,dc=test,dc=com"]
  # ## Requires config.ldap_check_attributes in devise.rb to be true
  # ## Can have multiple attributes and values, must match all to be authorized
  # require_attribute:
  #   objectClass: inetOrgPerson
  #   authorizationRole: postsAdmin

## Environment

production:
  host: <%= ENV['SOMERVILLE_SFTP_HOST'] %>
  port: <%= ENV['SOMERVILLE_SFTP_PORT'] %>
  attribute: <%= ENV['SOMERVILLE_SFTP_ATTRIBUTE'] %>
  base: <%= ENV['SOMERVILLE_SFTP_BASE'] %>
  ssl: true
  <<: *AUTHORIZATIONS

## Authorizations
# Uncomment out the merging for each environment that you'd like to include.
# You can also just copy and paste the tree (do not include the "authorizations") to each
# environment if you need something different per enviornment.
authorizations: &AUTHORIZATIONS
  allow_unauthenticated_bind: false
  # group_base: ou=groups,dc=test,dc=com
  ## Requires config.ldap_check_group_membership in devise.rb be true
  # Can have multiple values, must match all to be authorized
  # required_groups:
  #   # If only a group name is given, membership will be checked against "uniqueMember"
  #   - cn=admins,ou=groups,dc=test,dc=com
  #   - cn=users,ou=groups,dc=test,dc=com
  #   # If an array is given, the first element will be the attribute to check against, the second the group name
  #   - ["moreMembers", "cn=users,ou=groups,dc=test,dc=com"]
  # ## Requires config.ldap_check_attributes in devise.rb to be true
  # ## Can have multiple attributes and values, must match all to be authorized
  # require_attribute:
  #   objectClass: inetOrgPerson
  #   authorizationRole: postsAdmin

## Environment

production:
  host: <%= ENV['SOMERVILLE_LDAP_HOST'] %>
  port: <%= ENV['SOMERVILLE_LDAP_PORT'] %>
  attribute: <%= ENV['SOMERVILLE_LDAP_ATTRIBUTE'] %>
  base: <%= ENV['SOMERVILLE_LDAP_BASE'] %>
  ssl: true
  <<: *AUTHORIZATIONS

Use the right variable names, duh
Use the right variable names, duh
