Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docs/freeipa.md should mention the required NIFI attribute auth_provider.ldap_attribute.user_member ldap.j2 #200

Open
hadoopch opened this issue Feb 6, 2024 · 0 comments
Labels
documentation Improvements or additions to documentation

Comments

@hadoopch
Copy link

hadoopch commented Feb 6, 2024

Hi,

it would be helpful that the example in the freeipa doc mentions also the required NIFI attribute

  • auth_provider.ldap_attribute.user_member

in ./roles/config/cluster/base/templates/configs/ldap.j2

base_dn: "dc={{ (krb5_realm | lower).split('.') | join(',dc=') }}"
user_dn: "cn=users,cn=accounts,{{ base_dn }}"
group_dn: "cn=groups,cn=accounts,{{ base_dn }}"

auth_providers:
  freeipa:
    ldap_bind_user_dn: "uid=admin,{{ user_dn }}"
    ldap_bind_password: "{{ ipaadmin_password }}"
    ldap_search_base:
      user: "{{ user_dn }}"
      group: "{{ group_dn }}"
    ldap_object_class:
      user: "person"
      group: "groupofnames"
    ldap_attribute:
      user: "uid"
      group: "cn"
      member: "member"
      user_member: "memberOf"
    type: LDAP
    ldap_url: "ldaps://{{ groups.krb5_server | first }}"

@wmudge wmudge added the documentation Improvements or additions to documentation label Feb 7, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
documentation Improvements or additions to documentation
Development

No branches or pull requests

2 participants