Ori.livneh has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/243366

Change subject: Tell graphite-web's apache to set REMOTE_USER to LDAP user's uid
......................................................................

Tell graphite-web's apache to set REMOTE_USER to LDAP user's uid

Set `AuthLDAPRemoteUserAttribute uid`, which tells Apache to set REMOTE_USER to
the user's id. This can then be picked up by Django's RemoteUserMiddleware and
used for authentication.

Change-Id: I36d9dd3973785a072b2eb03013668007ca5b0fa4
---
M templates/graphite/apache-auth-ldap.erb
1 file changed, 1 insertion(+), 0 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/66/243366/1

diff --git a/templates/graphite/apache-auth-ldap.erb 
b/templates/graphite/apache-auth-ldap.erb
index bdf4caf..78769d8 100644
--- a/templates/graphite/apache-auth-ldap.erb
+++ b/templates/graphite/apache-auth-ldap.erb
@@ -5,6 +5,7 @@
         AuthLDAPBindDN <%= @ldap_binddn %>
         AuthLDAPBindPassword <%= @ldap_bindpass %>
         AuthLDAPURL "<%= @ldap_authurl %>"
+        AuthLDAPRemoteUserAttribute uid
 
         <LimitExcept OPTIONS>
             <% @ldap_groups.each do |group| -%>

-- 
To view, visit https://gerrit.wikimedia.org/r/243366
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I36d9dd3973785a072b2eb03013668007ca5b0fa4
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Ori.livneh <[email protected]>

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to