upstream/vault
1
0
Fork 0
mirror of https://github.com/hashicorp/vault.git synced 2026-05-28 04:10:44 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

samaccountname as login example

Browse source
This commit is contained in:
Hanno Hecker 2016-01-27 09:25:05 +01:00
parent 769bee060c
commit c23b5bf1e6
1 changed files with 15 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
website/source/docs/auth/ldap.html.md
View file

@ -107,7 +107,21 @@ OUs like
ou=people ou=external ou=robots
```
you can also specify a `binddn` and `bindpass` for vault to search for the DN
of a user.
of a user. This also works for the AD where a typical setup is to have user
DNs in the form `cn=Firstname Lastname,ou=Users,dc=example,dc=com` but you
want to login users using the `sAMAccountName` attribute. For that specify
```
$ vault write auth/ldap/config url="ldap://ldap.forumsys.com" \
userattr=sAMAccountName \
userdn="ou=users,dc=example,dc=com" \
groupdn="dc=example,dc=com" \
binddn="cn=vault,ou=users,dc=example,dc=com" \
bindpass='My$ecrt3tP4ss' \
certificate=@ldap_ca_cert.pem \
insecure_tls=false \
starttls=true
...
```
Next we want to create a mapping from an LDAP group to a Vault policy: