NuKVM/xen-orchestra
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update ldap.md

Browse Source
This commit is contained in:
Olivier Lambert 2015-11-11 14:54:00 +01:00
parent 7f93ae3354
commit cc2b7a4748
1 changed files with 30 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
ldap.md
View File

@ -1,2 +1,32 @@
# LDAP
XO currently support connection to LDAP directories, like *Open LDAP* or *Active Directory*.
To configure your LDAP, go need to go in the plugin section in "Settings":
![LDAP plugin settings]()
## Filters
LDAP Filters allow you to match properly your user. It's not an easy task to always find the right filter, and it's entirely depending of your LDAP configuration. Still, here is a list of common filters:
* `'(uid={{name}})'` is usually the default filter for *Open LDAP*
* `'(cn={{name}})'`, `'(sAMAccountName={{name}})'`, `'(sAMAccountName={{name}}@<domain>)'` or even `'(userPrincipalName={{name}})'` are widely used for *Active Directory*. Please check with your AD Admin to find the right one.
After finishing the configuration, you can try to log in with your LDAP username and password. Finally, right after your initial successful log in, your account will be visible in the user list of Xen Orchestra.
## Debugging
If you can't log in with your LDAP settings, please check the logs of `xo-server` while you attempt to connect. It will give you hints about the error encountered. You can do that with a `tail -f /var/log/syslog -n 100` on your XOA.
## Missing plugin?
If you don't find the LDAP plugin in the list, be sure to have it displayed in your Xen Orchestra configuration (in `/etc/xo-server/config.yaml`):
```
plugins:
auth-ldap:
```
If it's not the case, don't forget to restart the service after your modification, with `systemctl restart xo-server.service`.