LDAP configuration options

This page details the list of Juju charm configuration options used to integrate the ceph-radosgw charm with an external Lightweight Directory Access Protocol (LDAP) directory server.

These options are applied using juju config ceph-radosgw <option>=<value>. See our how-to guide for integrating RADOS Gateway with LDAP.

  • ldap-uri (string, default: empty)
    URI of the LDAP server, e.g. ldaps://ldap.example.com. Setting this
    enables LDAP authentication. The presence of this option enables all the LDAP features.

  • ldap-search-base (string, default: empty)
    Base DN used when searching for users, e.g.
    ou=users,dc=example,dc=com. Must be be configured alongside ldap-uri to enable LDAP authentication.

  • ldap-bind-dn (string, default: empty)
    DN used to bind to the directory before performing user searches, e.g.
    cn=admin,dc=example,dc=com. Leave empty for anonymous binding.

  • ldap-bind-password (string, default: empty)
    Password for ldap-bind-dn. Written to /etc/ceph/ldap.secret (mode
    0600) and referenced from rgw_ldap_secret. Leave empty for anonymous
    binding.

  • ldap-user-attr (string, default: uid)
    LDAP attribute whose value must match the S3 access key/uid presented
    by the client (rendered as rgw_ldap_dnattr).

  • ldap-search-filter (string, default: empty)
    Additional LDAP search filter applied when looking up users, e.g.
    (objectclass=posixAccount).

Previous Release notes Next Appendices

This page was last modified 6 hours ago. Help improve this document in the forum.