Hawkin
/
arangodb
mirror of https://gitee.com/bigwinds/arangodb
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

LDAP: documentation

This commit is contained in:
baslr 2017-03-25 10:45:48 +01:00
parent 3d28afa878
commit fa1e0517f1
1 changed files with 19 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
Documentation/Books/Manual/Administration/Configuration/Ldap.mdpp
View File

@ -3,8 +3,25 @@ LDAP
__This feature is available in the Enterprise Edition.__ __This feature is available in the Enterprise Edition.__
The basic options are `--ldap.enabled`, `--ldap.tls`, `--ldap.port`, `--ldap.server` and `--ldap.permissionsattributename`. The basic options are `--ldap.enabled`, `--ldap.tls`, `--ldap.port`, `--ldap.server` and `--ldap.permissions-attribute-name`.
`--ldap.server` can be specified multiple times.
`--ldap.server` and `--ldap.port` can be replace by `--ldap.url`.
`--ldap.permissions-attribute-name` has the format *databse-name=(*|rw|none)[,database-name=(*|rw|none)]*.
There are two modes of operation: *simple auth* and *bind+search*.
### simple auth
Example:
--ldap.enabled true --ldap.server 192.168.2.119 --ldap.permissions-attribute-name description \
--ldap.prefix uid= --ldap.suffix ,dc=example,dc=com
`--ldap.prefix` and `--ldap.suffix` build the distinguished name (DN). ArangoDB trys to authenticate
with *prefix* + *ArangoDB username* + *suffix* against the ldap server and search for the database permissions.
### bind+search
@ -13,8 +30,6 @@ The basic options are `--ldap.enabled`, `--ldap.tls`, `--ldap.port`, `--ldap.ser
--ldap.enabled true --ldap.server 192.168.2.119 --ldap.prefix uid= --ldap.suffix ,dc=example,dc=com --ldap.permissionsattributename description
--ldap.enabled true --ldap.server 192.168.2.119 --ldap.basedn dc=example,dc=com --ldap.searchfilter "objectClass=simpleSecurityObject" --ldap.enabled true --ldap.server 192.168.2.119 --ldap.basedn dc=example,dc=com --ldap.searchfilter "objectClass=simpleSecurityObject"
--ldap.searchattribute "uid" --ldap.binddn cn=admin,dc=example,dc=com --ldap.bindpasswd hallo --ldap.permissionsattributename description --ldap.searchattribute "uid" --ldap.binddn cn=admin,dc=example,dc=com --ldap.bindpasswd hallo --ldap.permissionsattributename description