potiuk commented on pull request #18670: URL: https://github.com/apache/airflow/pull/18670#issuecomment-933310373
> I would say this should be opt-in, rather than by default with ldap, as I've been in plenty of places where being to create a user manually when using LDAP is viewed as a security risk (cos then the user is not managed centrally. Just to clarify - adding the user in Airflow DB in this case does NOT create the user in LDAP. It only creates a DB user entry in DB, allowing the user to log-in, but the user must exist in LDAP prior to that. It just merely tells Airflow "This user, when atuthenticatng via LDAP should be able to use Airflow" - so it's only authorization to Airflow, not authentication in LDAP is managed via Airflow UI. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
