mirror of
https://github.com/minio/docs.git
synced 2025-06-05 19:57:02 +03:00
Bug fixes for two issues related to LDAP and site replication (#1348)
Corrects docs to state that when expanding a site replication peer set, you must list all existing peers. Closes #1340 Adds information that when adding Distinguished Names as search parameters, multiple DNs must be separated with a semi-colon. Closes #1341
This commit is contained in:
parent
0556337429
commit
b79934f11d
@ -233,12 +233,15 @@ The user can then use the passed SSH Public Key to log in to SFTP servers.
|
||||
|
||||
Specify the base Distinguished Name (DN) MinIO uses when querying for
|
||||
user credentials matching those provided by an authenticating client.
|
||||
|
||||
Separate multiple DNs with a semicolon (``;``).
|
||||
|
||||
For example:
|
||||
|
||||
.. code-block:: shell
|
||||
:class: copyable
|
||||
|
||||
cn=miniousers,dc=myldapserver,dc=net
|
||||
cn=miniousers,dc=myldapserver,dc=net;ou=swengg,dc=min,dc=io
|
||||
|
||||
Supports :ref:`Lookup-Bind <minio-external-identity-management-ad-ldap-lookup-bind>` mode.
|
||||
|
||||
@ -279,7 +282,7 @@ For example:
|
||||
|
||||
.. start-minio-ad-ldap-group-search-base-dn
|
||||
|
||||
Specify a comma-separated list of group search base Distinguished Names
|
||||
Specify a semicolon-separated (``;``) list of group search base `Distinguished Names <https://learn.microsoft.com/en-us/previous-versions/windows/desktop/ldap/distinguished-names>`__
|
||||
MinIO uses when performing group lookups.
|
||||
|
||||
For example:
|
||||
@ -287,7 +290,7 @@ For example:
|
||||
.. code-block:: shell
|
||||
:class: copyable
|
||||
|
||||
cn=miniogroups,dc=myldapserver,dc=net"
|
||||
cn=miniogroups,dc=myldapserver,dc=net;ou=swengg,dc=min,dc=io
|
||||
|
||||
.. end-minio-ad-ldap-group-search-base-dn
|
||||
|
||||
@ -406,7 +409,7 @@ MinIO sends the token using the HTTP `Authorization <https://developer.mozilla.o
|
||||
|
||||
.. start-minio-identity-management-role-policy
|
||||
|
||||
Specify a comma separated list of MinIO :ref:`policies <minio-policy>` to assign to authenticated users.
|
||||
Specify a comma-separated list of MinIO :ref:`policies <minio-policy>` to assign to authenticated users.
|
||||
|
||||
.. end-minio-identity-management-role-policy
|
||||
|
||||
|
@ -427,7 +427,7 @@ The new site must meet the following requirements:
|
||||
.. tab-item:: Command Line
|
||||
:sync: cli
|
||||
|
||||
#. Deploy the new MinIO peer site(s) following the stated requirements.
|
||||
#. Deploy the new MinIO peer site(s) following the stated requirements
|
||||
|
||||
|
||||
#. Configure an alias for the new site
|
||||
@ -453,13 +453,17 @@ The new site must meet the following requirements:
|
||||
#. Add site replication configuration
|
||||
|
||||
Use the :mc-cmd:`mc admin replicate add` command to expand the site replication configuration with the new peer site.
|
||||
Specify the alias of any existing healthy peer site as the first parameter and the alias of the new site as the second parameter.
|
||||
Specify the alias of *all* existing peer sites, then the alias of the new site to add.
|
||||
|
||||
For example, the following command adds the new peer site ``minio4`` to an existing site replication configuration on ``minio1``.
|
||||
For example, the following command adds the new peer site ``minio4`` to an existing site replication configuration that includes the existing sites ``minio1``, ``minio2``, and ``minio3``.
|
||||
|
||||
.. code-block:: shell
|
||||
|
||||
mc admin replicate add minio1 minio4
|
||||
mc admin replicate add minio1 minio2 minio3 minio4
|
||||
|
||||
.. note::
|
||||
|
||||
If any of the sites are unreachable or permanently lost, you **must** first remove the unreachable site(s) with :mc-cmd:`mc admin replicate rm` before expanding with the new site.
|
||||
|
||||
#. Query the site replication configuration to verify
|
||||
|
||||
|
@ -97,13 +97,17 @@ Syntax
|
||||
|
||||
mc admin replicate add minio1 minio2 minio3
|
||||
|
||||
The following command expands an existing site replication that includes peer site ``minio1`` to an additional peer site, ``minio5``.
|
||||
The following command expands an existing site replication that includes peer sites ``minio1``, ``minio2``, ``minio3``, and ``minio4`` to an additional peer site, ``minio5``.
|
||||
``minio5`` contains no data.
|
||||
List *all* existing peer sites first.
|
||||
List the site to expand to last.
|
||||
|
||||
If any existing sites are unreachable, first remove the unreachable sites with :mc-cmd:`mc admin replicate rm`, then proceed with the site replication expansion.
|
||||
|
||||
.. code-block:: shell
|
||||
:class: copyable
|
||||
|
||||
mc admin replicate add minio1 minio5
|
||||
mc admin replicate add minio1 minio2 minio3 minio4 minio5
|
||||
|
||||
The following command creates a new site replication configuration with ILM expiration rule synchronization between peer sites ``minio1``, ``minio2``, and ``minio3``.
|
||||
|
||||
@ -134,9 +138,9 @@ Syntax
|
||||
Only the first alias can have buckets or objects.
|
||||
The first site can also be empty.
|
||||
|
||||
To expand an existing site replication to one more new replication sites, the first :ref:`alias <alias>` must be a peer site in the site replication set to expand.
|
||||
To expand an existing site replication to one more new replication sites, list all existing peer site :ref:`aliases <alias>` in the site replication set to expand.
|
||||
Then include one or more additional :ref:`aliases <alias>` to add to the existing site replication.
|
||||
The deployments to add must be empty.
|
||||
The peers being added must be empty.
|
||||
|
||||
.. mc-cmd:: --replicate-ilm-expiry
|
||||
:optional:
|
||||
|
Loading…
x
Reference in New Issue
Block a user