Hi Mark,

I believe maybe the syntax is not right..

Could you try this?

oauthConfig:

  assetPublicURL: https://master.domain.local:8443/console/

  grantConfig:

    method: auto

  identityProviders:

  - challenge: true

    login: true

    mappingMethod: claim

    name: Active_Directory

    provider:

      apiVersion: v1

      kind: LDAPPasswordIdentityProvider

      attributes:

        id:

        - dn

        email:

        - mail

        name:

        - cn

        preferredUsername:

        - uid

      bindDN: "cn=openshift,cn=users,dc=domain,dc=local"

      bindPassword: "password"

      insecure: true

      url: ldap://dc.domain.local:389/cn=users,dc=domain,dc=local?uid

  masterPublicURL: https://master.domain.local:8443
  masterURL: https://master.domain.local:8443


Best regards,

Rodrigo Bersa

Cloud Consultant, RHCVA, RHCE

Red Hat Brasil <https://www.redhat.com>

[email protected]    M: +55 11 99557-5841 <+55-11-99557-5841>
<https://red.ht/sig> [image: Red Hat] <http://www.redhat.com.br>
TRIED. TESTED. TRUSTED. <https://redhat.com/trusted>


<http://www.redhat.com.br>

On Wed, Jul 12, 2017 at 2:15 PM, Javier Palacios <[email protected]>
wrote:

>
> > I did try sAMAccountName at first and was getting the same results. Then
> I
> > had read that variable was for older Windows machines so I tried uid as
> that
> > was the other example I saw.
>
> The relevant part of my master-config.yaml is below, and appart from using
> ldaps, I don't see any other difference. If the uid attribute is valid on
> your schema, the yours seems ok.
>
> Javier Palacios
>
>   identityProviders:
>   - challenge: true
>     login: true
>     mappingMethod: claim
>     name: n4tdc1
>     provider:
>       apiVersion: v1
>       attributes:
>         email:
>         - mail
>         id:
>         - dn
>         name:
>         - cn
>         preferredUsername:
>         - sAMAccountName
>       bindDN: CN=openshift,OU=N4T-USERS,dc=net4things,dc=local
>       bindPassword: ********
>       ca: ad-ldap-ca.crt
>       insecure: false
>       kind: LDAPPasswordIdentityProvider
>       url: ldaps://n4tdc1.net4things.local/dc=net4things,dc=local?
> sAMAccountName
>
>
>
> _______________________________________________
> users mailing list
> [email protected]
> http://lists.openshift.redhat.com/openshiftmm/listinfo/users
>
_______________________________________________
users mailing list
[email protected]
http://lists.openshift.redhat.com/openshiftmm/listinfo/users

Reply via email to