LDAP

accelo config ldap

1. There is no ldap config file available

2. Generating a new ldap config file

3. Please edit '$AcceloHome/config/ldap/ldap.conf' and rerun this command

<$AcceloHome>/config/ldap/ldap.conf

accelo config ldap

Checking LDAP connection

2 Enter LDAP username: gs

3 Enter LDAP password: *******

performing ldap search ou=users,dc=acceldata,dc=io sub (&(objectClass=inetOrgPerson)(uid=gs))

username "gs" mapped to entry cn=gs,ou=users,dc=acceldata,dc=io

✗ Do you want to use this configuration: y

Ok, Updating login properties.

✓ Done, You can now login using LDAP.

accelo deploy addons

[x]  Job Runner

  [ ]  Kafka 0.10.2 Connector

  [x]  Kafka Connector

> [x]  LDAP

  [ ]  Log Reduce

  [x]  LogSearch

  [x]  Memsql Connector

accelo deploy core

Have you verified the acceldata config file at '/root/acceldata/config/acceldata_accelcluster.conf' ? [y/n]: : y

INFO: Existing AccelData networks found

INFO: The AccelData stack 'default' is already up and running.

✔ Would you like to reinitiate DB with the config file '/root/acceldata/config/acceldata_accelcluster.conf'? [y/n]: : y

accelo restart ad-graphql

ldap {

  configuration  {

    # The Ldap host

    host = "<IP>:<PORT>",

    # The following field is required if using port 389.

    insecureNoSSL = true,

    # insecureSkipVerify = true

    #rootCA = "/etc/dex/ldap.ca",

    bindDN = "uid=admin,ou=people,dc=hadoop,dc=apache,dc=org",

    bindPW = "admin-password",

    specialSearch = true,

    prefix = "uid=",

    suffix = ",ou=people,dc=hadoop,dc=apache,dc=org",

    userSearch  {

      # Would translate to the query "(&(objectClass=person)(uid=<username>))"

      baseDN = "ou=people,dc=hadoop,dc=apache,dc=org",

      filter = "(objectClass=person)",

      username = "uid",

      idAttr = "uid"

      #emailAttr = "mail",

      #nameAttr = "name"

      # Can be 'sub' or 'one'

      scope = "sub"

    }

    groupSearch  {

      # Would translate to the query "(&(objectClass=group)(member=<user uid>))"

      baseDN = "ou=groups,dc=hadoop,dc=apache,dc=org",

      filter = "(objectClass=groupofnames)",

      # Use if full DN is needed and not available as any other attribute

      # Will only work if "DN" attribute does not exist in the record

      # userAttr: DN

      userAttr = "uid",

      groupAttr = "member",

      nameAttr = "name"

      # Can be 'sub' or 'one'

      scope = "sub"

    }

  }

}

specialSearch = true,

prefix = "uid=",

suffix = ",ou=people,dc=hadoop,dc=apache,dc=org",

<ACCELOHOME>/config/security/

$ accelo admin makeconfig ad-ldap

<ldap.conf>

insecureNoSSL = false

insecureSkipVerify = false

rootCA = “/etc/ssl/cert.pem

<ACCELOHOME>/config/security/ldap.ca:/etc/ssl/cert.pem

​

volumes:

- <ACCELOHOME>/config/security/ldap.ca:/etc/ssl/cert.pem

ldap {

  configuration  {

    # The Ldap host

    host = "<IP>:<PORT>",

    # The following field is required if using port 389.

    insecureNoSSL = false

    insecureSkipVerify = true

    #rootCA = "/etc/dex/ldap.ca",

    bindDN = "Administrator@ADSRE.COM",

    bindPW = "PASSWORD",

    specialSearch = false,

    prefix = "",

    suffix = "",

    userSearch  {

      # Would translate to the query "(&(objectClass=person)(uid=<username>))"

      baseDN = "OU=users,OU=hadoop,DC=adsre,DC=com",

      filter = "(objectClass=person)",

      username = "sAMAccountName",

      idAttr = "sAMAccountName",

      emailAttr = "mail",

      nameAttr = "name"

      # Can be 'sub' or 'one'

      scope = "sub"

    }

    groupSearch  {

      # Would translate to the query "(&(objectClass=group)(member=<user DN>))"

      baseDN = "OU=groups,OU=hadoop,DC=adsre,DC=com",

      filter = "(objectClass=group)",

      # Use if full DN is needed and not available as any other attribute

      # Will only work if "DN" attribute does not exist in the record

      # userAttr: DN

      userAttr = "DN",

      groupAttr = "member",

      nameAttr = "name"

      # Can be 'sub' or 'one'

      scope = "sub"

    }

  }

}