Ori.livneh has uploaded a new change for review.
https://gerrit.wikimedia.org/r/243366
Change subject: Tell graphite-web's apache to set REMOTE_USER to LDAP user's uid
......................................................................
Tell graphite-web's apache to set REMOTE_USER to LDAP user's uid
Set `AuthLDAPRemoteUserAttribute uid`, which tells Apache to set REMOTE_USER to
the user's id. This can then be picked up by Django's RemoteUserMiddleware and
used for authentication.
Change-Id: I36d9dd3973785a072b2eb03013668007ca5b0fa4
---
M templates/graphite/apache-auth-ldap.erb
1 file changed, 1 insertion(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/66/243366/1
diff --git a/templates/graphite/apache-auth-ldap.erb
b/templates/graphite/apache-auth-ldap.erb
index bdf4caf..78769d8 100644
--- a/templates/graphite/apache-auth-ldap.erb
+++ b/templates/graphite/apache-auth-ldap.erb
@@ -5,6 +5,7 @@
AuthLDAPBindDN <%= @ldap_binddn %>
AuthLDAPBindPassword <%= @ldap_bindpass %>
AuthLDAPURL "<%= @ldap_authurl %>"
+ AuthLDAPRemoteUserAttribute uid
<LimitExcept OPTIONS>
<% @ldap_groups.each do |group| -%>
--
To view, visit https://gerrit.wikimedia.org/r/243366
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I36d9dd3973785a072b2eb03013668007ca5b0fa4
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Ori.livneh <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits