Vladimir,
Welcome, and thank you very much!
We will definitely take a look at your patch, as time allows. Thank
you for the contribution. I remember Matt mentioning this after condor
week, I believe.
You've been added to a send filter on the cumin-users list so you
should be able to post freely. Not much activity on this list yet, but
we hope to change that.
Thanks again,
Trevor McKay
On Tue, 2011-08-30 at 13:31 +0200, Vladimir Motoska wrote:
Hi all,
some time ago we briefly talked to Matthew Farrellee about LDAP authentication.
We created a simple patch to Cumin 0.1.4794 which enables LDAP authentication.
The configuration is easy just add "auth" line to config file. Auth parameter
has the following format
[backend]=[url]
i.e.:
auth:ldap=ldap://ldap.domain.local/ou=People,dc=domain,dc=local??sub?(&(|(accessTo=cluster.domain.local)(accessTo=domain.local)(trustmodel=fullaccess))(accountActive=TRUE)(uid=%%s))
To enable a user to login with ldap credentials you need to create the user in
cumin db by entering
#cumin-admin add-user [database] USER [PASSWORD]
database can be internal or external ( internal is the default auth mechanism )
For the future it would be maybe better to enable a http proxy authentication
like apache... This would enable easy integration with SSO infrastructure or
various backends. However we would appreciate your feedback in this matter
since you have more clear vision of further Cumin development.
Best Regards
_______________________________________________
cumin-users mailing list
cumin-users(a)lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/cumin-users