You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@streampark.apache.org by GitBox <gi...@apache.org> on 2022/10/05 19:58:05 UTC
[GitHub] [incubator-streampark] MonsterChenzhuo opened a new issue, #1735: [Improve] Splitting ldap logic
MonsterChenzhuo opened a new issue, #1735:
URL: https://github.com/apache/incubator-streampark/issues/1735
### Search before asking
- [X] I had searched in the [feature](https://github.com/apache/streampark/issues?q=is%3Aissue+label%3A%22Feature%22) and found no similar feature requirement.
### Description
The above image is the login screen of a commercial software. I think ldap login and local user login, splitting the meeting will be more clear and better to use
### Usage Scenario
Login Software
### Related issues
_No response_
### Are you willing to submit a PR?
- [X] Yes I am willing to submit a PR!
### Code of Conduct
- [X] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@streampark.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [incubator-streampark] MonsterChenzhuo commented on issue #1735: [Improve] Splitting ldap logic
Posted by GitBox <gi...@apache.org>.
MonsterChenzhuo commented on issue #1735:
URL: https://github.com/apache/incubator-streampark/issues/1735#issuecomment-1277165230
你说的没有问题，但是可以想象一下，每一个要登陆的用户先要登陆失败一下，然后在对应绑定，这样体验不是很好。
ldap需要做一个组和team进行映射。 这样会更好，进入直接绑定到事先预设好的team下
所以，这个issues会分为两个pr：
1.拆分本地用户登陆和ldap登陆 @MonsterChenzhuo来完成
2.做ldap组和team组映射 @lysgithub0302 来完成，他在自如内做了大量这方面的工作，很有经验
针对这个逻辑的细节会由@lysgithub0302在当前issues 进行描述，如何实现
There is no problem with what you said, but imagine that each user who wants to log in first has to log in and fail a bit, and then in the corresponding binding, so the experience is not very good.
ldap needs to do a group and team for mapping. This will be better, into the direct binding to the pre-defined team under
So, this issues will be divided into two pr.
1. split local user login and ldap login @MonsterChenzhuo to complete
2. do ldap group and team group mapping @lysgithub0302 to complete, he has done a lot of work in this area within the self-image, very experienced
@wolfboys @1996fanrui Have you decided that this is okay?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@streampark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [incubator-streampark] 1996fanrui commented on issue #1735: [Improve] Splitting ldap logic
Posted by GitBox <gi...@apache.org>.
1996fanrui commented on issue #1735:
URL: https://github.com/apache/incubator-streampark/issues/1735#issuecomment-1277443704
Hi @MonsterChenzhuo LTGM, thanks for your great idea!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@streampark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [incubator-streampark] MonsterChenzhuo commented on issue #1735: [Improve] Splitting ldap logic
Posted by GitBox <gi...@apache.org>.
MonsterChenzhuo commented on issue #1735:
URL: https://github.com/apache/incubator-streampark/issues/1735#issuecomment-1272315973
Because of the new TEAM logic【https://github.com/apache/incubator-streampark/issues/1629
】, which increases the complexity of splitting ldap.
The following issues are derived
1. whether the default user type of ldap user is admin or user
2. how to bind the team of ldap user
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@streampark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [incubator-streampark] MonsterChenzhuo closed issue #1735: [Improve] Splitting ldap logic
Posted by GitBox <gi...@apache.org>.
MonsterChenzhuo closed issue #1735: [Improve] Splitting ldap logic
URL: https://github.com/apache/incubator-streampark/issues/1735
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@streampark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [incubator-streampark] 1996fanrui commented on issue #1735: [Improve] Splitting ldap logic
Posted by GitBox <gi...@apache.org>.
1996fanrui commented on issue #1735:
URL: https://github.com/apache/incubator-streampark/issues/1735#issuecomment-1272325704
Hi @MonsterChenzhuo , thanks for your discussion.
When an ldap user logs into streampark for the first time, the ldap user will be mapped to a streampark user, right?
If yes.
> whether the default user type of ldap user is admin or user?
The default user type is user which is better than admin because admin is the system administrator. It has all the permissions in StreamPark.
> how to bind the team of ldap user
The first login is similar to registering a user without binding a team. After the first login, how about Admin manually bind the team?
In other words: just the registration process is different. Generally, the user is created on the platform, and the ldap user is created when logging in for the first time.
Please correct me if anything is wrong.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@streampark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [incubator-streampark] wolfboys closed issue #1735: [Improve] ldap front-end adaptation
Posted by GitBox <gi...@apache.org>.
wolfboys closed issue #1735: [Improve] ldap front-end adaptation
URL: https://github.com/apache/incubator-streampark/issues/1735
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@streampark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [incubator-streampark] MonsterChenzhuo commented on issue #1735: [Improve] Splitting ldap logic
Posted by GitBox <gi...@apache.org>.
MonsterChenzhuo commented on issue #1735:
URL: https://github.com/apache/incubator-streampark/issues/1735#issuecomment-1264860328
[](url)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@streampark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org