Skip to content

Commit

Permalink
Attempt to fix the AD groups (SumoLogic#57)
Browse files Browse the repository at this point in the history
* swap out linux binary

* update role:
  • Loading branch information
mlclmj committed Aug 17, 2020
1 parent 6cbfcd5 commit 795f3b2
Show file tree
Hide file tree
Showing 4 changed files with 12 additions and 9 deletions.
14 changes: 6 additions & 8 deletions modules/role/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -9,11 +9,9 @@ resource "sumologic_role" "sumo-role" {
capabilities = var.capabilities
}

# Commenting this out until we can fix LDAP connections to AD
# # Generate AD group to match the Sumo Logic role
# resource "ad_group_to_ou" "ad-group" {
# ou_distinguished_name = "OU=SumoLogic RBAC,OU=2FA Objects,OU=NYTMG,DC=ent,DC=nytint,DC=com"
# group_name = local.name
# description = "AD Group for Sumo Logic RBAC group ${local.name}"
# auto_gid = true
# }
# Generate AD group to match the Sumo Logic role
resource "ad_group_to_ou" "ad-group" {
ou_distinguished_name = var.ad_oudn
group_name = local.name
description = "AD Group for Sumo Logic RBAC group ${local.name}"
}
7 changes: 6 additions & 1 deletion modules/role/variables.tf
Original file line number Diff line number Diff line change
Expand Up @@ -31,4 +31,9 @@ variable "role_prefix" {
test = "test-sumo"
prd = "sumo"
}
}
}

variable "ad_oudn" {
type = string
default = "OU=SumoLogic RBAC,OU=2FA Objects,OU=NYTMG,DC=ent,DC=nytint,DC=com"
}
Binary file not shown.
Binary file not shown.

0 comments on commit 795f3b2

Please sign in to comment.