You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by cr...@apache.org on 2016/07/27 21:33:59 UTC
incubator-airflow git commit: [AIRFLOW-331] modify the LDAP
authentication config lines in 'Security' sample codes
Repository: incubator-airflow
Updated Branches:
refs/heads/master 0a8410d4d -> 7dbc3cd40
[AIRFLOW-331] modify the LDAP authentication config lines in 'Security' sample codes
Closes #1674 from impangt/master
Project: http://git-wip-us.apache.org/repos/asf/incubator-airflow/repo
Commit: http://git-wip-us.apache.org/repos/asf/incubator-airflow/commit/7dbc3cd4
Tree: http://git-wip-us.apache.org/repos/asf/incubator-airflow/tree/7dbc3cd4
Diff: http://git-wip-us.apache.org/repos/asf/incubator-airflow/diff/7dbc3cd4
Branch: refs/heads/master
Commit: 7dbc3cd40e5c4f072897bcae46929ad61a2b4590
Parents: 0a8410d
Author: Peter Pang <im...@users.noreply.github.com>
Authored: Wed Jul 27 14:33:39 2016 -0700
Committer: Chris Riccomini <ch...@wepay.com>
Committed: Wed Jul 27 14:33:39 2016 -0700
----------------------------------------------------------------------
docs/security.rst | 8 ++++++--
1 file changed, 6 insertions(+), 2 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/incubator-airflow/blob/7dbc3cd4/docs/security.rst
----------------------------------------------------------------------
diff --git a/docs/security.rst b/docs/security.rst
index 1f33548..50d9167 100644
--- a/docs/security.rst
+++ b/docs/security.rst
@@ -67,16 +67,20 @@ Valid search_scope options can be found in the `ldap3 Documentation <http://ldap
auth_backend = airflow.contrib.auth.backends.ldap_auth
[ldap]
+ # set a connection without encryption: uri = ldap://<your.ldap.server>:<port>
uri = ldaps://<your.ldap.server>:<port>
user_filter = objectClass=*
- user_name_attr = uid # in case of Active Directory you would use sAMAccountName
+ # in case of Active Directory you would use: user_name_attr = sAMAccountName
+ user_name_attr = uid
superuser_filter = memberOf=CN=airflow-super-users,OU=Groups,OU=RWC,OU=US,OU=NORAM,DC=example,DC=com
data_profiler_filter = memberOf=CN=airflow-data-profilers,OU=Groups,OU=RWC,OU=US,OU=NORAM,DC=example,DC=com
bind_user = cn=Manager,dc=example,dc=com
bind_password = insecure
basedn = dc=example,dc=com
cacert = /etc/ca/ldap_ca.crt
- search_scope = LEVEL # Set this to SUBTREE if using Active Directory, and not specifying an Organizational Unit
+ # Set search_scope to one of them: BASE, LEVEL , SUBTREE
+ # Set search_scope to SUBTREE if using Active Directory, and not specifying an Organizational Unit
+ search_scope = LEVEL
The superuser_filter and data_profiler_filter are optional. If defined, these configurations allow you to specify LDAP groups that users must belong to in order to have superuser (admin) and data-profiler permissions. If undefined, all users will be superusers and data profilers.