minio/docs
1
0
Fork 0
mirror of https://github.com/minio/docs.git synced 2025-07-31 18:04:52 +03:00
Code Activity

Adding guidance around LDAP groups

Browse Source
This commit is contained in:
Ravind Kumar
2025-06-24 10:48:37 -04:00
parent 01eee15b8b
commit f778a58c70
3 changed files with 17 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
source/includes/common-minio-external-auth.rst
View File

@ -278,6 +278,12 @@ For example:
(&(objectclass=groupOfNames)(memberUid=%s)) (&(objectclass=groupOfNames)(memberUid=%s))
When providing an AD/LDAP group search filter, configure a filter that returns the minimum number of relevant groups for the purpose of supporting authentication.
Filters that return large group assignments increase the size of associated calls and resources.
Functions sensitive to large request or response bodies may exhibit unexpected behaviors as a result.
.. end-minio-ad-ldap-group-search-filter .. end-minio-ad-ldap-group-search-filter
.. start-minio-ad-ldap-group-search-base-dn .. start-minio-ad-ldap-group-search-base-dn

4
source/operations/external-iam/configure-ad-ldap-external-identity-management.rst
View File

@ -191,6 +191,10 @@ An AD/LDAP user with no assigned policy *and* with membership in groups with no
For complete documentation on these variables, see :ref:`minio-server-envvar-external-identity-management-ad-ldap` For complete documentation on these variables, see :ref:`minio-server-envvar-external-identity-management-ad-ldap`
When providing an AD/LDAP group search filter, configure a filter that returns the minimum number of relevant groups for the purpose of supporting authentication.
Filters that return large group assignments increase the size of associated calls and resources.
Functions sensitive to large request or response bodies may exhibit unexpected behaviors as a result.
2) Restart the MinIO Deployment 2) Restart the MinIO Deployment
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

5
source/reference/minio-server/settings/iam/ldap.rst
View File

@ -266,6 +266,11 @@ Group Search Filter
:start-after: start-minio-ad-ldap-group-search-filter :start-after: start-minio-ad-ldap-group-search-filter
:end-before: end-minio-ad-ldap-group-search-filter :end-before: end-minio-ad-ldap-group-search-filter
When providing an AD/LDAP group search filter, configure a filter that returns the minimum number of relevant groups for the purpose of supporting authentication.
Filters that return large group assignments increase the size of associated calls and resources.
Functions sensitive to large request or response bodies may exhibit unexpected behaviors as a result.
Group Search Base DN Group Search Base DN
~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~