From 2f5eebd3b6e25bd871712129c55a58fcbb98fb56 Mon Sep 17 00:00:00 2001 From: ddeyo Date: Wed, 17 Oct 2018 09:28:50 -0700 Subject: [PATCH] deleting obsolete topic --- .../external-auth/enable-ldap-config-file.md | 68 ------------------- 1 file changed, 68 deletions(-) delete mode 100644 ee/ucp/admin/configure/external-auth/enable-ldap-config-file.md diff --git a/ee/ucp/admin/configure/external-auth/enable-ldap-config-file.md b/ee/ucp/admin/configure/external-auth/enable-ldap-config-file.md deleted file mode 100644 index 973a8c278e..0000000000 --- a/ee/ucp/admin/configure/external-auth/enable-ldap-config-file.md +++ /dev/null @@ -1,68 +0,0 @@ ---- -title: Integrate with LDAP by using a configuration file -description: Set up LDAP authentication by using a configuration file. -keywords: UCP, LDAP, config ---- - -Docker UCP integrates with LDAP directory services, so that you can manage -users and groups from your organization's directory and automatically -propagate this information to UCP and DTR. You can set up your cluster's LDAP -configuration by using the UCP web UI, or you can use a -[UCP configuration file](../ucp-configuration-file.md). - -To see an example TOML config file that shows how to configure UCP settings, -run UCP with the `example-config` option. -[Learn about UCP configuration files](../ucp-configuration-file.md). - -```bash -docker container run --rm {{ page.ucp_org }}/{{ page.ucp_repo }}:{{ page.ucp_version }} example-config -``` - -## Set up LDAP by using a configuration file - -1. Use the following command to extract the name of the currently active - configuration from the `ucp-agent` service. - - ```bash - {% raw %} - $ CURRENT_CONFIG_NAME=$(docker service inspect --format '{{ range $config := .Spec.TaskTemplate.ContainerSpec.Configs }}{{ $config.ConfigName }}{{ "\n" }}{{ end }}' ucp-agent | grep 'com.docker.ucp.config-') - {% endraw %} - ``` - -2. Get the current configuration and save it to a TOML file. - - ```bash - {% raw %} - docker config inspect --format '{{ printf "%s" .Spec.Data }}' $CURRENT_CONFIG_NAME > config.toml - {% endraw %} - ``` - -3. Use the output of the `example-config` command as a guide to edit your - `config.toml` file. Under the `[auth]` sections, set `backend = "ldap"` - and `[auth.ldap]` to configure LDAP integration the way you want. - -4. Once you've finished editing your `config.toml` file, create a new Docker - Config object by using the following command. - - ```bash - NEW_CONFIG_NAME="com.docker.ucp.config-$(( $(cut -d '-' -f 2 <<< "$CURRENT_CONFIG_NAME") + 1 ))" - docker config create $NEW_CONFIG_NAME config.toml - ``` - -5. Update the `ucp-agent` service to remove the reference to the old config - and add a reference to the new config. - - ```bash - docker service update --config-rm "$CURRENT_CONFIG_NAME" --config-add "source=${NEW_CONFIG_NAME},target=/etc/ucp/ucp.toml" ucp-agent - ``` - -6. Wait a few moments for the `ucp-agent` service tasks to update across - your cluster. If you set `jit_user_provisioning = true` in the LDAP - configuration, users matching any of your specified search queries will - have their accounts created when they log in with their username and LDAP - password. - -## Where to go next - -- [Create users and teams manually](../../../authorization/create-users-and-teams-manually.md) -- [Create teams with LDAP](../../../authorization/create-teams-with-ldap.md)