You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@dolphinscheduler.apache.org by "mjeremym2 (via GitHub)" <gi...@apache.org> on 2024/06/01 13:06:31 UTC
[I] [Improvement][dolphinscheduler-api] Make ADMIN user a "memberOf" when using LDAP server [dolphinscheduler]
mjeremym2 opened a new issue, #16106:
URL: https://github.com/apache/dolphinscheduler/issues/16106
### Search before asking
- [X] I had searched in the [issues](https://github.com/apache/dolphinscheduler/issues?q=is%3Aissue) and found no similar feature requirement.
### Description
The currently implementation will only llow one user to be ADMIN for a scheduler instance using the attribute
security.authentication.ldap.user.admin=read-only-admin
Further more the revoke/invoking must be done changing the dolphin config. In large organisation this will done through roles/groups.
Therefore, I would like to be assign admin access using LDAP groups ("memberOf" attribute)
So can we extend the code (keeping the old way too), but also add chacke like "mail" attributes
security.authentication.ldap.user.admin-attribute=membmerOf
security.authentication.ldap.user.admin-value=cn=dolphinAdmin,dc=....etc...
https://github.com/apache/dolphinscheduler/pull/16105
### Are you willing to submit a PR?
- [X] Yes I am willing to submit a PR!
### Code of Conduct
- [X] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Improvement][dolphinscheduler-api] Make ADMIN user a "memberOf" when using LDAP server [dolphinscheduler]
Posted by "caishunfeng (via GitHub)" <gi...@apache.org>.
caishunfeng closed issue #16106: [Improvement][dolphinscheduler-api] Make ADMIN user a "memberOf" when using LDAP server
URL: https://github.com/apache/dolphinscheduler/issues/16106
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Improvement][dolphinscheduler-api] Make ADMIN user a "memberOf" when using LDAP server [dolphinscheduler]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #16106:
URL: https://github.com/apache/dolphinscheduler/issues/16106#issuecomment-2212664079
This issue has been automatically marked as stale because it has not had recent activity for 30 days. It will be closed in next 7 days if no further activity occurs.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Improvement][dolphinscheduler-api] Make ADMIN user a "memberOf" when using LDAP server [dolphinscheduler]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #16106:
URL: https://github.com/apache/dolphinscheduler/issues/16106#issuecomment-2227537980
This issue has been closed because it has not received response for too long time. You could reopen it if you encountered similar problems in the future.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Improvement][dolphinscheduler-api] Make ADMIN user a "memberOf" when using LDAP server [dolphinscheduler]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] closed issue #16106: [Improvement][dolphinscheduler-api] Make ADMIN user a "memberOf" when using LDAP server
URL: https://github.com/apache/dolphinscheduler/issues/16106
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Improvement][dolphinscheduler-api] Make ADMIN user a "memberOf" when using LDAP server [dolphinscheduler]
Posted by "mjeremym2 (via GitHub)" <gi...@apache.org>.
mjeremym2 commented on issue #16106:
URL: https://github.com/apache/dolphinscheduler/issues/16106#issuecomment-2154542191
Improved feature buy replacing "admin-attribute" and "admin-value" to "admin-filter" so a filter check is applied to find admin users. This will enable different LDAP setup for ROLES. The filter makes it very generic to identify the ADMIN role
For the "ldap.forumsys.com" were we make all scientist admins
security.authentication.ldap.user.admin-filter=(&(ou=scientists)(uniqueMember=uid={0},dc=example,dc=com))
to the use of "memberOf" assigning of roles.
(security.authentication.ldap.user.admin-filter=&(sAMAccountName={0})(memberOf=CN=admin,OU=dolphin,DC=example,DC=com)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org