Re: Not able to add LDAP Groups


DaoJun Zhang <dao...@...>
 

The LDAP group is different with email group, you can not use email group here.

First you need to confirm that the requirement is meet:

https://github.com/goharbor/harbor/blob/master/docs/manage_role_by_ldap_group.md#prerequisite

 

Then you need to create a LDAP group contains specified users.

 

From: <harb...@...> on behalf of Chethan S <chetha...@...>
Date: Wednesday, October 10, 2018 at 1:25 PM
To: harbor-users <harb...@...>
Subject: Not able to add LDAP Groups

 

I was hoping to use the newly introduced LDAP groups functionality to quickly add users to Harbor but not having much luck with that. 

 

My Objective

In Harbor's Administration > Groups, I should be able to specify an email group like team...@... or just the teamname. Currently, this approach results in an error -  LDAP Group DN is not found: DN: teamname

 

My Configuration

  1. LDAP Group Base DN: DC=domainname,DC=com
  2. LDAP Group filter: objectclass=groupOfNames
  3. LDAP Group GID: uid (also tried cn)
  4. LDAP Group Scope: Subtree
  5. LDAP Group Admin DN: blank

Our IT department was not able to help in this regard as they felt Harbor has intricate requirements. Did anyone here get things to work?

 

--
You received this message because you are subscribed to the Google Groups "harbor-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to harbor-users+unsu...@....
To post to this group, send email to harbor...@....
To view this discussion on the web visit https://groups.google.com/d/msgid/harbor-users/38b42502-177f-43c8-9bf3-cfed6db1ec18%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Join harbor-users@lists.cncf.io to automatically receive all group messages.