honeymoose/OpenSearch
1
0
Fork 0
mirror of https://github.com/honeymoose/OpenSearch.git synced 2025-02-23 21:38:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

[DOCS] [Security] Templates do not use bind_dn (elastic/x-pack-elasticsearch#1979)

Browse Source 
Document that user_dn_template mode for LDAP authentication does not support bind_dn

Original commit: elastic/x-pack-elasticsearch@eef72615a8
This commit is contained in:
Tim Vernum 2017-07-13 14:23:23 +10:00 committed by GitHub
parent 84ee21ed26
commit a36121a725
2 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
docs/en/security/authentication/ldap-realm.asciidoc
View File

@ -85,7 +85,7 @@ users, you can use User DN templates to configure the realm. The advantage of
this method is that a search does not have to be performed to find the user DN.
However, multiple bind operations might be needed to find the correct user DN.
To configure an `ldap` Realm with User Search:
To configure an `ldap` Realm with User DN templates:
. Add a realm configuration of type `ldap` to `elasticsearch.yml` in the
`xpack.security.authc.realms` namespace. At a minimum, you must set the realm `type` to
@ -119,6 +119,9 @@ xpack:
. Restart Elasticsearch
IMPORTANT: The `bind_dn` setting is not used in template mode.
All LDAP operations will execute as the authenticating user.
[[ldap-load-balancing]]
===== Load Balancing and Failover

1
docs/en/settings/security-settings.asciidoc
View File

@ -155,6 +155,7 @@ to `1h`.
`bind_dn`::
The DN of the user that will be used to bind to the LDAP and perform searches.
Only applicable in {xpack-ref}/ldap-realm.html#ldap-user-search[user search mode].
If this is not specified, an anonymous bind will be attempted.
Defaults to Empty.