[
https://issues.apache.org/jira/browse/KNOX-3318?focusedWorklogId=1023614&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-1023614
]
ASF GitHub Bot logged work on KNOX-3318:
----------------------------------------
Author: ASF GitHub Bot
Created on: 04/Jun/26 07:40
Start Date: 04/Jun/26 07:40
Worklog Time Spent: 10m
Work Description: smolnar82 commented on code in PR #1227:
URL: https://github.com/apache/knox/pull/1227#discussion_r3354310194
##########
knox-site/docs/service_ldap_server.md:
##########
@@ -0,0 +1,150 @@
+# Knox LDAP Service
+
+The Knox LDAP Service provides an embedded LDAP server within the Knox
Gateway. It acts as a pluggable LDAP proxy or facade, allowing Knox to expose a
standard LDAP interface to clients while fetching user and group information
from various backends.
+
+## Overview
+
+Introduced in [KNOX-3247](https://issues.apache.org/jira/browse/KNOX-3247),
the Knox LDAP Service leverages Apache Directory Server (ApacheDS) to provide a
lightweight, embedded LDAP server. Its primary goal is to provide a consistent
LDAP interface for authentication and group lookups, even when the underlying
identity store is not a traditional LDAP server or is a remote server that
requires proxying.
+
+Key features include:
+- **Pluggable Backends**: Support for different data sources (JSON files,
remote LDAP/AD).
+- **Embedded Server**: No need for an external LDAP server for simple use
cases or testing.
+- **Active Directory Integration**: Optimized for proxying to AD with support
for `sAMAccountName` and `memberOf`.
Review Comment:
Fixed.
Issue Time Tracking
-------------------
Worklog Id: (was: 1023614)
Time Spent: 50m (was: 40m)
> Document Knox LDAP Server feature in the User Guide
> ---------------------------------------------------
>
> Key: KNOX-3318
> URL: https://issues.apache.org/jira/browse/KNOX-3318
> Project: Apache Knox
> Issue Type: Task
> Components: Document
> Affects Versions: 3.0.0
> Reporter: Sandor Molnar
> Assignee: Sandor Molnar
> Priority: Major
> Fix For: 3.0.0
>
> Time Spent: 50m
> Remaining Estimate: 0h
>
> Recent improvements in KNOX-3247 and KNOX-3277 implemented an embedded LDAP
> server/proxy within Knox. This task adds a comprehensive documentation page
> (service_ldap_server.md) to the knox-site module. The new documentation
> covers the service's architecture, configuration properties for both file and
> proxy backends, and specific optimizations for Active Directory integration.
> The page has been integrated into the "{{{}Client/User Guide{}}}" section of
> the official documentation.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
