ashb commented on pull request #18670: URL: https://github.com/apache/airflow/pull/18670#issuecomment-933503051
> Just to clarify - adding the user in Airflow DB in this case does NOT create the user in LDAP. It only creates a DB user entry in Airflow DB, allowing the user to log-in, but the user must exist in LDAP prior to that (and the user is centrally managed in LDAP still including the password of the user- but being able to access Airflow is not determined by belonging to a certain LDAP group - but by presence of the user entry in Airflow DB) That is not the case. If the user is not found in LDAP the DB is tried. https://github.com/apache/airflow/blob/866a601b76e219b3c043e1dbbc8fb22300866351/airflow/api/auth/backend/basic_auth.py#L43-L47 This means that (when that API backend is in use) I can create a user only in the Airflow DB and authenticate to the API with it. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
