potiuk edited a comment on pull request #18670:
URL: https://github.com/apache/airflow/pull/18670#issuecomment-933310373
> I would say this should be opt-in, rather than by default with ldap, as
I've been in plenty of places where being to create a user manually when using
LDAP is viewed as a security risk (cos then the user is not managed centrally.
Just to clarify - adding the user in Airflow DB in this case does NOT create
the user in LDAP. It only creates a DB user entry in Airflow DB, allowing the
user to log-in, but the user must exist in LDAP prior to that (and the user is
centrally managed in LDAP still including the password of the user)
It just merely tells Airflow "This user, when atuthenticatng via LDAP (and
password matches the LDAP password) should be able to use Airflow" - so it's
only authorization to Airflow, not authentication in LDAP is managed via
Airflow UI.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
