Skip to content

Bug 1254061, added note on whitelisting users #4828

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ahardin-rh merged 1 commit into from
Jul 26, 2017
Merged

Bug 1254061, added note on whitelisting users #4828

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 6 additions & 3 deletions install_config/configuring_authentication.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -479,11 +479,9 @@ to create a search filter that looks like:

For example, consider a URL of:

====
----
ldap://ldap.example.com/o=Acme?cn?sub?(enabled=true)
----
====

When a client attempts to connect using a user name of `bob`, the resulting
search filter will be `(&(enabled=true)(cn=bob))`.
Expand All @@ -494,7 +492,6 @@ If the LDAP directory requires authentication to search, specify a `bindDN` and
[[ldap-example-config]]

.Master Configuration Using *LDAPPasswordIdentityProvider*
====
----
oauthConfig:
...
Expand Down Expand Up @@ -550,6 +547,12 @@ configured URL. If empty, system trusted roots are used. Only applies if
`ldaps://` URLs connect using TLS, and `ldap://` URLs are upgraded to TLS.
<13> An RFC 2255 URL which specifies the LDAP host and search parameters to use,
xref:ldap-url[as described above].

[NOTE]
====
To whitelist users for an LDAP integration, use the `lookup` mapping method.
Before a login from LDAP would be allowed, a cluster administrator must create
an identity and user object for each LDAP user.
====

[[BasicAuthPasswordIdentityProvider]]
Expand Down