Re: LDAP Authentication with CloudStack 4.2

[ilya musayev <il...@gmail.com>]

Ian Duffy worked on ACS and LDAP UI integration that would allow you to add
users via UI. Though it is part of 4.3 release.

For 4.2 releases, if i recall correctly, you need to have 1 valid user that
BINDs to LDAP, but it does not automagically pull in all users. You still
have to manually add usernames.


On Thursday, February 27, 2014, Kiran Koneti <ki...@citrix.com>
wrote:
> Hi Brent,
>
> In the version 4.2 and 4.2.1 there is no way to directly import the Ldap
users into the CS,hence we nee to manually create the Ldap users in the CS
with the desired role which we want to give for that particular ldap user
in the CS giving some random password. The Ldap user can then login to the
CS using this password or else can login to the CS using the LDap password.
> When the user tries to login CS initially validates the password with the
local db and if the password doesn't match it tries to validate with the
ldap password for the same user and provides the authentication for the
user.
>
> -----Original Message-----
> From: Brent Clark [mailto:bclark@tendrilinc.com]
> Sent: 19 February 2014 03:26
> To: users@cloudstack.apache.org
> Subject: LDAP Authentication with CloudStack 4.2
>
> Hi folks,
>
> I am trying to use LDAP Authentication with CloudStack 4.2.1 and the
documents are a bit confusing.
>
> I am able to enter LDAP settings in the WebGUI successfully. I'm stuck at
how to authenticate a user now.
>
> From what I have read, there is some talk that I need to create a regular
cloudstack user and it will auto-magically auth to LDAP. I have tried this
and doesn't seem to work as I can only login with the password set when the
user is created in the cloudstack webgui.
>
> Any help is appreciated.
> Thanks!
> --
> Brent S. Clark
> NOC Engineer
>
> 2580 55th St.  |  Boulder, Colorado 80301 www.tendrilinc.com  |  blog <
http://www.tendrilinc.com/news-room/blog/>
> <http://www.tendrilinc.com/>
>
>
> This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they are
addressed.
> If you have received this email in error please notify the sender.
> Please note that any views or opinions presented in this email are solely
those of the author and do not necessarily represent those of the company.
> Finally, the recipient should check this email and any attachments for
the presence of viruses.
> The company accepts no liability for any damage caused by any virus
transmitted by this email.
>