Ldapsync

Open totosh opened this issue 4 years ago • 0 comments

Q A

Bug fix? no

New feature? yes

API breaks? no

Deprecations? no

Related tickets -

License Apache 2.0

Q	A
Bug fix?	no
New feature?	yes
API breaks?	no
Deprecations?	no
Related tickets	-
License	Apache 2.0

What's in this PR?

Add missing options for ldap auth. Now we can submit a truststore to recognize the ldap server certificate signed by a private pki. Add a way to enable and setup users and groups sync from the ldap server. When ldap sync is enabled, the operator switch FileUserGroupProvider to CompositeConfigurableUserGroupProvider.

Why?

We want nifi cluster to use users and groups from our ldap server.

Checklist

[x] Implementation tested
[X] Error handling code meets the guideline
[X] Logging code meets the guideline
[X] User guide and development docs updated (if needed)
[ ] Append changelog with changes

Aug 21 '21 08:08 totosh