Skip to content

canonical/ldap-integrator

Repository files navigation

ldap-integrator

CharmHub Badge Juju License

Continuous Integration Status pre-commit Conventional Commits

Description

This charm is used to configure an ldap client charm to use an external ldap service.

Usage

In this section we are going to deploy the glauth operator and use the ldap integrator to connect it to an existing LDAP server.

Prerequisites

You will need:

  • A juju deployment
  • An existing LDAP server of your choice and you will need a bind_dn + password for glauth to use

Deployment

First you will need to deploy the charms:

juju deploy glauth-k8s --channel edge --trust
juju deploy ldap-integrator --channel edge --trust
juju deploy self-signed-certificates --channel stable --trust

Configuration

Now that we have deployed our charms, we will need to configure ldap-integrator.

First we need to create a juju secret with the bind password:

juju add-secret my-secret password=<bind_password>

Now we need to grant access to the secret to the ldap-integrator:

juju grant-secret my-secret ldap-integrator

Then you will have to configure the ldap-integrator, eg:

juju config ldap-integrator urls=ldap://path/to/somewhere base_dn=dc=glauth,dc=com bind_dn=cn=user,ou=group,dc=glauth,dc=com bind_password=my-secret

Now you can integrate glauth with ldap-integrator:

juju integrate glauth-k8s ldap-integrator

Now glauth will be proxying all ldap requests to your ldap server.

Other resources