Bigbluebutton Greenlight Without Docker Kubernetes
Bigbluebutton Greenlight Without Docker Server
Bigbluebutton Greenlight Without Docker Ubuntu
Bigbluebutton Greenlight Without Docker Image
Bigbluebutton Greenlight Without Docker Jeans

To help you set up a BigBlueButton server (or upgrade an existing one), bbb-install.sh is a shell script that automates the step-by-step instructions for installing and configuring a BigBlueButton 2.2 server. Configuring Greenlight 2.0. Greenlight is a highly configurable application. The various configuration options can be found below. When making a changes to the.env file, in order for them to take effect you must restart you Greenlight container.

Greenlight is a highly configurable application. The various configuration options can be found below. When making a changes to the .env file, in order for them to take effect you must restart you Greenlight container. For information on how to do this, see Applying .env Changes.

Using a Different Relative Root

By default Greenlight is deployed to the /b sub directory. If you are running Greenlight on a BigBlueButton server you must deploy Greenlight to a sub directory to avoid conflicts.

If you with to use a relative root other than /b, you can do the following:

Change the RELATIVE_URL_ROOT environment variable.
Update the /etc/bigbluebutton/nginx/greenlight.nginx file to reflect the new relative root.
Restart Nginx and the Greenlight server.

If you are not deploying Greenlight on a BigBlueButton server and want the application to run at root, simply set the RELATIVE_ROOT_URL to be blank.

Setting a Custom Branding Image

You can now setup branding for Greenlight through its Administrator Interface.

User Authentication

Greenlight supports four types of user authentication. You can configure any number of these, and Greenlight will dynamically adjust to which ones are configured.

In Application (Greenlight)

Greenlight has the ability to create accounts on its own. Users can sign up with their name, email and password and use Greenlight’s full functionality.

By default, the ability for anyone to create a Greenlight account is enabled. To disable this, set the ALLOW_GREENLIGHT_ACCOUNTS option in your .env file to false. This will not delete existing Greenlight accounts, but will prevent new ones from being created.

Google OAuth2

You can use your own Google account, but since Greenlight will use this account for sending out emails, you may want to create a Google account related to the hostname of your BigBlueButton server. For example, if your BigBlueButton server is called example.myserver.com, you may want to create a Google account called greenlight_notifications_myserver.

You need a Google account to create an OAuth 2 CLIENT_ID and SECRET. The will enable users of Greenlight to authenticate with their own Google account (not yours).

If you want to see the documentation behind OAuth2 at Google, click the link https://developers.google.com/identity/protocols/OAuth2.

First, create a Project click the “CREATE” link.

In the menu on the left, click “Credentials”.

Next, click the “OAuth consent screen” tab below the “Credentials” page title.

From here take the following steps:

Choose any application name e.g “Greenlight”
Set “Authorized domains” to your hostname eg “hostname” where hostname is your hostname
Set “Application Homepage link” to your hostname e.g “http://hostname/b/” where hostname is your hostname
Set “Application Privacy Policy link” to your hostname e.g “http://hostname/b/” where hostname is your hostname
Click “Save”

Next,

Click “Create credentials”
Select “OAuth client ID”
Select “Web application”
Choose any name e.g “bbb-endpoint”
Under “Authorized redirect URIs” enter “https://hostname/b/auth/google/callback” where hostname is your hostname
Click “Create”

A window should open with your OAuth credentials. In this window, copy client ID and client secret to the .env file so it resembles the following (your credentials will be different).

The GOOGLE_OAUTH2_HD environment variable is optional and can be used to restrict Google authentication to a specific Google Apps hosted domain.

Office365 OAuth2

You will need an Office365 account to create an OAuth 2 key and secret. This will allow Greenlight users to authenticate with their own Office365 accounts.

To begin, head over to the following site and sign in to your Office365 account:https://portal.azure.com/

In the menu on the left, click “Azure Active Directory”.

Under the “Manage” tab, click “App registrations”.

From here take the following steps:

Click “New Registration”
Choose any application name e.g “bbb-endpoint”
Set the Redirect URI to your url (must be https): “https://hostname/b/auth/office365/callback”
Click “Register”

Once your application has been created, Under the “Overview” tab, copy your “Application (client) ID” into the OFFICE365_KEY environment variable in your .env file.

Finally, click the “Certificates & secrets” under the “Manage” tab

From here take the following steps:

Click “New client secret”
Choose the “Never” option in the “Expires” option list
Copy the value of your password into the OFFICE365_SECRET environment variable in your .env file

LDAP Auth

Greenlight is able to authenticate users using an external LDAP server. To connect Greenlight to an LDAP server, you will have to provide values for the environment variables under the ‘LDAP Login Provider’ section in the .env file. You need to provide all of the values for LDAP authentication to work correctly.

LDAP_SERVER is the server host.

LDAP_PORT is the server port (commonly 389).

LDAP_METHOD is the authentication method, either ‘plain’ (default), ‘ssl’ or ‘tls’.

LDAP_UID is the name of the attribute that contains the user id. For example, OpenLDAP uses ‘uid’.

LDAP_BASE is the location to look up users.

LDAP_BIND_DN is the default account to use for user lookup.

LDAP_AUTH is the preferred authentication method. (See below)

LDAP_PASSWORD is the password for the account to perform user lookup.

LDAP_ROLE_FIELD is the name of the attribute that contains the user role. (Optional)

LDAP_FILTER is the filter which can be used to only allow a specific subset of users to authenticate. (Optional)

LDAP_ATTRIBUTE_MAPPING allows you to specify which attributes in your LDAP server match which attributes in Greenlight (Optional - See below)

LDAP_AUTH

When setting the authentication method, there are currently 3 options:

'simple': Uses the account set in LDAP_BIND_DN to look up users
'user': Uses the user’s own credentials to search for his data, enabling authenticated login to LDAP without the need for a user with global read privileges.
'anonymous': Enables an anonymous bind to the LDAP with no password being used.

LDAP_ROLE_FIELD

Greenlight can automatically assign a matching role to a user based on their role in the LDAP Server. To do that:

Create a role in Greenlight with the exact same name as the LDAP role
Set the role permissions for the newly created role
Repeat for all possible roles
Set LDAP_ROLE_FIELD equal to the name of the attribute that stores the role
Restart Greenlight

Once you have signed in with that user, they will automatically be given the Greenlight role that matches their LDAP role.

LDAP_ATTRIBUTE_MAPPING

When a LDAP user signs into Greenlight, the LDAP gem l

Bigbluebutton Greenlight Without Docker