cp-ansible icon indicating copy to clipboard operation
cp-ansible copied to clipboard

Add tests that use LdapAuthenticateCallbackHandler for authentication via LDAP

Open chuck-confluent opened this issue 4 years ago • 1 comments

The education team has found that it's a very common use case to handle authentication over LDAP via the LdapAuthenticateCallbackHandler.

This is especially true with RBAC configurations, since LDAP is already needed to provide principals anyway.

It would be good to have test scenarios that use the LdapAuthenticateCallbackHandler for AuthN and RBAC for AuthZ. I have working configs from various courses in the curriculum library if reference is needed.

chuck-confluent avatar Sep 20 '21 23:09 chuck-confluent

Working inventory: https://github.com/confluentinc/training-adm-auto-ansible/tree/master/infra/course-src/inventories/production

See also module 5 of the ansible education course, "Deploy Confluent Securely with Ansible", complete with hands-on lab.

chuck-confluent avatar Oct 04 '21 18:10 chuck-confluent

Hi @chuck-confluent , thanks for pointing this out. I've added a test to cover this in this PR. Please review once, I will then merge it.

mansisinha avatar Oct 25 '22 12:10 mansisinha

Hey @mansisinha , thanks so much for the PR!

Perhaps we should request a reviewer from the ansible team, like @domenicbove ? Or, maybe check on the #ansibe-oncall slack channel?

chuck-confluent avatar Oct 25 '22 15:10 chuck-confluent

closing the issue since the test has been merged in 7.3

mansisinha avatar Nov 17 '22 11:11 mansisinha