[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

syncing ldap groups with openshift 1.4



Hi all,

I am following the documentation here:

https://docs.openshift.org/latest/install_config/syncing_groups_with_ldap.html

I used a yaml config here:

https://gist.github.com/jaloren/ec7b76feea980dd23d757c477680f751

Which failed with:

error: validation of LDAP sync config failed: usersQuery.filter: Invalid value: "(objectclass=inetOrgPerson)": cannot specify a filter when using "dn" as the UID attribute

Seems like the bug here in the docs has not actually been fixed.

https://bugzilla.redhat.com/show_bug.cgi?id=1381674

But okay so you can't use DN with a object class filter that's fine. So then I tried it without an object class but left everything else the same and now I see this:

error: validation of LDAP sync config failed: groupsQuery.filter: Invalid value: "": invalid query filter: LDAP Result Code 201 "": ldap: filter does not start with an '('

So if I can't use an object class with a DN as the UID attribute and I can't do a sync without an object class, my questions are: how does one get this to work where the DN is the UID attribute and if DN is not acceptable for the UID attribute, then what is?

Thanks,

Joe


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]