luxolus
/
open-vault
2
0
Fork 0
Code Issues 1 Pull Requests Releases Activity

Ldap auth doc fix (#2568) 

* Move url parameter to the next line and fix a typo

* Add userdn paramater to the Scenario 1.
Without userdn set Vault can't search with error like

Code: 400. Errors:

* LDAP search failed for detecting user: LDAP Result Code 32 "No Such Object": 0000208D: NameErr: DSID-031001E5, problem 2001 (NO_OBJECT), data 0, best match of:
        ''
This commit is contained in:
Pavel Timofeev 2017-04-05 18:29:38 +03:00 committed by Jeff Mitchell
parent 76c74a3995
commit d2afabe4f6
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
website/source/docs/auth/ldap.html.md
View File

@ -164,6 +164,7 @@ Use `vault path-help` for more details.
```
$ vault write auth/ldap/config \
url="ldap://ldap.example.com" \
userdn="ou=Users,dc=example,dc=com" \
groupdn="ou=Groups,dc=example,dc=com" \
groupfilter="(&(objectClass=group)(member:1.2.840.113556.1.4.1941:={{.UserDN}}))" \
groupattr="cn" \
@ -186,7 +187,8 @@ $ vault write auth/ldap/config \
* Group membership will be resolved via the `memberOf` attribute of _user_ objects. That search will begin under `ou=Users,dc=example,dc=com`.
```
$ vault write auth/ldap/config url="ldap://ldap.example.com" \
$ vault write auth/ldap/config \
url="ldap://ldap.example.com" \
userattr=sAMAccountName \
userdn="ou=Users,dc=example,dc=com" \
groupdn="ou=Users,dc=example,dc=com" \
@ -211,7 +213,8 @@ $ vault write auth/ldap/config url="ldap://ldap.example.com" \
* Group names are identified using the `cn` attribute.
```
$ vault write auth/ldap/config url="ldaps://ldap.example.com" \
$ vault write auth/ldap/config \
url="ldaps://ldap.example.com" \
userattr="uid" \
userdn="ou=Users,dc=example,dc=com" \
discoverdn=true \
@ -293,7 +296,7 @@ It should be noted that user -> policy mapping happens at token creation time. A
</ul>
<ul>
<li>
<span class="param">tls_in_version</span>
<span class="param">tls_min_version</span>
<span class="param-flags">optional</span>
Minimum TLS version to use. Accepted values are `tls10`, `tls11` or
`tls12`. Defaults to `tls12`.