LDAP and Automation

[Benjamin VanEvery]

We're trying to move from file authentication to ldap authentication. I'm curious how other people are authenticating their automation curl requests. Did you create a service user in your ldap?

[Devon Peters]

We're using a service user in LDAP for the automated stuff.

-devon

--
You received this message because you are subscribed to the Google Groups "Collins" group.
To unsubscribe from this group and stop receiving emails from it, send an email to collins-sm+...@googlegroups.com.
To post to this group, send email to colli...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/collins-sm/CAFv%2B-eER9cYgwNDmH3zgcL4ALXNS1GfsUKwSRUstsz43dtttzA%40mail.gmail.com.
For more options, visit https://groups.google.com/groups/opt_out.
 
 

[Benjamin VanEvery]

Thanks, Devon.

That's what it looks like we may need to do. We'd prefer to avoid creating service users in LDAP, but that appears to be the only option currently. I'm considering a mixed authentication that allows a local service user to authenticate over the API only, but would allow LDAP users for the UI and API.

To view this discussion on the web visit https://groups.google.com/d/msgid/collins-sm/D3CF2BE1757A5948ABF1992C0F99AF6B0174B6D5%40mbx3.jiveland.com.

[Chris Burroughs]

We have several different service users with powers ranging from
read-only (for ohai) to power-cycle-assets (for provisioning).