albibacsi

ldap

Dec 17th, 2018
207
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.59 KB | None | 0 0
  1. https://groups.google.com/forum/#!msg/repo-discuss/-7a4xb6LPzM/FgX1Kv4eCQAJ
  2.  
  3. Hi, this is my configuration just in case it helps:
  4.  
  5. With this configuration I can login as admin/secret as gerrit admin or
  6. user1/user1 as a regular user.
  7.  
  8. # ldap ldif( openldap )
  9.  
  10. #groups
  11.  
  12. dn: ou=groups,dc=example,dc=org
  13. objectClass: organizationalUnit
  14. objectClass: top
  15. ou: groups
  16.  
  17. dn: ou=users,dc=example,dc=org
  18. objectClass: organizationalUnit
  19. objectClass: top
  20. ou: users
  21.  
  22. dn: cn=developers,ou=groups,dc=example,dc=org
  23. objectClass: posixGroup
  24. objectClass: top
  25. cn: developers
  26. gidNumber: 1002
  27.  
  28. dn: cn=testers,ou=groups,dc=example,dc=org
  29. objectClass: posixGroup
  30. objectClass: top
  31. cn: testers
  32. gidNumber: 1003
  33.  
  34. # Add admin to users
  35.  
  36. dn: uid=admin,ou=users,dc=example,dc=org
  37. objectClass: top
  38. objectClass: inetOrgPerson
  39. objectClass: posixAccount
  40. cn: admin
  41. uid: admin
  42. sn: admin
  43. uidNumber: 1000
  44. gidNumber: 1002
  45. homeDirectory: /home/admin
  46. userPassword: secret
  47.  
  48. # add admin to developers
  49.  
  50. dn: cn=developers,ou=groups,dc=example,dc=org
  51. changetype: modify
  52. add: memberUid
  53. memberUid: admin
  54.  
  55. # Add user1 to users
  56.  
  57. dn: uid=user1,ou=users,dc=example,dc=org
  58. objectClass: top
  59. objectClass: inetOrgPerson
  60. objectClass: posixAccount
  61. cn: user1
  62. uid: user1
  63. sn: user1
  64. uidNumber: 1001
  65. gidNumber: 1002
  66. homeDirectory: /home/user1
  67. userPassword: user1
  68.  
  69. # add user1 to developers
  70.  
  71. dn: cn=developers,ou=groups,dc=example,dc=org
  72. changetype: modify
  73. add: memberUid
  74. memberUid: user1
  75.  
  76. #######################################################################################
  77.  
  78. # gerrit.config
  79.  
  80. git config -f /var/gerrit/etc/gerrit.config auth.type ldap
  81. git config -f /var/gerrit/etc/gerrit.config ldap.server ldap://ldap
  82. git config -f /var/gerrit/etc/gerrit.config ldap.username cn=admin,dc=example,dc=org
  83. git config -f /var/gerrit/etc/gerrit.config ldap.accountBase dc=example,dc=org
  84. git config -f /var/gerrit/etc/gerrit.config ldap.accountPattern '(&(objectClass=person)(uid=${username}))'
  85. git config -f /var/gerrit/etc/gerrit.config ldap.accountFullName displayName
  86. git config -f /var/gerrit/etc/gerrit.config ldap.accountEmailAddress mail
  87. git config -f /var/gerrit/etc/gerrit.config ldap.mandatoryGroup ldap/developers
  88. git config -f /var/gerrit/etc/gerrit.config ldap.groupBase ou=groups,dc=example,dc=org
  89. git config -f /var/gerrit/etc/gerrit.config ldap.groupPattern '(cn=${groupname})'
  90. git config -f /var/gerrit/etc/gerrit.config ldap.groupMemberPattern '(memberUid=${username})'
  91. git config -f /var/gerrit/etc/gerrit.config ldap.fetchMemberOfEagerly true
  92.  
  93. git config -f /var/gerrit/etc/secure.config ldap.password secret
Advertisement
Add Comment
Please, Sign In to add comment