You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@knox.apache.org by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/06/04 07:41:00 UTC

[jira] [Work logged] (KNOX-3318) Document Knox LDAP Server feature in the User Guide

     [ https://issues.apache.org/jira/browse/KNOX-3318?focusedWorklogId=1023614&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-1023614 ]

ASF GitHub Bot logged work on KNOX-3318:
----------------------------------------

                Author: ASF GitHub Bot
            Created on: 04/Jun/26 07:40
            Start Date: 04/Jun/26 07:40
    Worklog Time Spent: 10m 
      Work Description: smolnar82 commented on code in PR #1227:
URL: https://github.com/apache/knox/pull/1227#discussion_r3354310194


##########
knox-site/docs/service_ldap_server.md:
##########
@@ -0,0 +1,150 @@
+# Knox LDAP Service
+
+The Knox LDAP Service provides an embedded LDAP server within the Knox Gateway. It acts as a pluggable LDAP proxy or facade, allowing Knox to expose a standard LDAP interface to clients while fetching user and group information from various backends.
+
+## Overview
+
+Introduced in [KNOX-3247](https://issues.apache.org/jira/browse/KNOX-3247), the Knox LDAP Service leverages Apache Directory Server (ApacheDS) to provide a lightweight, embedded LDAP server. Its primary goal is to provide a consistent LDAP interface for authentication and group lookups, even when the underlying identity store is not a traditional LDAP server or is a remote server that requires proxying.
+
+Key features include:
+- **Pluggable Backends**: Support for different data sources (JSON files, remote LDAP/AD).
+- **Embedded Server**: No need for an external LDAP server for simple use cases or testing.
+- **Active Directory Integration**: Optimized for proxying to AD with support for `sAMAccountName` and `memberOf`.

Review Comment:
   Fixed.





Issue Time Tracking
-------------------

    Worklog Id:     (was: 1023614)
    Time Spent: 50m  (was: 40m)

> Document Knox LDAP Server feature in the User Guide
> ---------------------------------------------------
>
>                 Key: KNOX-3318
>                 URL: https://issues.apache.org/jira/browse/KNOX-3318
>             Project: Apache Knox
>          Issue Type: Task
>          Components: Document
>    Affects Versions: 3.0.0
>            Reporter: Sandor Molnar
>            Assignee: Sandor Molnar
>            Priority: Major
>             Fix For: 3.0.0
>
>          Time Spent: 50m
>  Remaining Estimate: 0h
>
> Recent improvements in KNOX-3247 and KNOX-3277 implemented an embedded LDAP server/proxy within Knox. This task adds a comprehensive documentation page (service_ldap_server.md) to the knox-site module. The new documentation covers the service's architecture, configuration properties for both file and proxy backends, and specific optimizations for Active Directory integration. The page has been integrated into the "{{{}Client/User Guide{}}}" section of the official documentation.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)