Hi all, I am following the documentation here:
https://docs.openshift.org/latest/install_config/syncing_groups_with_ldap.html I used a yaml config here: https://gist.github.com/jaloren/ec7b76feea980dd23d757c477680f751 Which failed with: error: validation of LDAP sync config failed: usersQuery.filter: Invalid value: "(objectclass=inetOrgPerson)": cannot specify a filter when using "dn" as the UID attribute Seems like the bug here in the docs has not actually been fixed. https://bugzilla.redhat.com/show_bug.cgi?id=1381674 But okay so you can't use DN with a object class filter that's fine. So then I tried it without an object class but left everything else the same and now I see this: error: validation of LDAP sync config failed: groupsQuery.filter: Invalid value: "": invalid query filter: LDAP Result Code 201 "": ldap: filter does not start with an '(' So if I can't use an object class with a DN as the UID attribute and I can't do a sync without an object class, my questions are: how does one get this to work where the DN is the UID attribute and if DN is not acceptable for the UID attribute, then what is? Thanks, Joe
_______________________________________________ users mailing list [email protected] http://lists.openshift.redhat.com/openshiftmm/listinfo/users
