vault

mirror of https://github.com/hashicorp/vault.git synced 2025-09-01 03:51:08 +02:00

History

Oren Shomron 005cb3e042 LDAP Auth Backend Overhaul

--------------------------

Added new configuration option to ldap auth backend - groupfilter.
GroupFilter accepts a Go template which will be used in conjunction with
GroupDN for finding the groups a user is a member of. The template will
be provided with context consisting of UserDN and Username.

Simplified group membership lookup significantly to support multiple use-cases:
  * Enumerating groups via memberOf attribute on user object
  * Previous default behavior of querying groups based on member/memberUid/uniqueMember attributes
  * Custom queries to support nested groups in AD via LDAP_MATCHING_RULE_IN_CHAIN matchind rule

There is now a new configuration option - groupattr - which specifies
how to resolve group membership from the objects returned by the primary groupfilter query.

Additional changes:
  * Clarify documentation for LDAP auth backend.
  * Reworked how default values are set, added tests
  * Removed Dial from LDAP config read. Network should not affect configuration.

2016-07-22 21:20:05 -04:00

audit

Update index.html.md

2016-03-31 14:19:03 +02:00

auth

LDAP Auth Backend Overhaul

2016-07-22 21:20:05 -04:00

commands

Migrate number of retries down by one to have it be max retries, not tries

2016-07-11 21:57:14 +00:00

concepts

Some policy concept page clarifications