Cumin and LDAP
by Vladimir Motoska
Hi all,
some time ago we briefly talked to Matthew Farrellee about LDAP authentication.
We created a simple patch to Cumin 0.1.4794 which enables LDAP authentication.
The configuration is easy just add "auth" line to config file. Auth parameter
has the following format
[backend]=[url]
i.e.:
auth:ldap=ldap://ldap.domain.local/ou=People,dc=domain,dc=local??sub?(&(|(accessTo=cluster.domain.local)(accessTo=domain.local)(trustmodel=fullaccess))(accountActive=TRUE)(uid=%%s))
To enable a user to login with ldap credentials you need to create the user in
cumin db by entering
#cumin-admin add-user [database] USER [PASSWORD]
database can be internal or external ( internal is the default auth mechanism )
For the future it would be maybe better to enable a http proxy authentication
like apache... This would enable easy integration with SSO infrastructure or
various backends. However we would appreciate your feedback in this matter
since you have more clear vision of further Cumin development.
Best Regards
11 years, 3 months