LDAP not working with RBAC #4440
peddakotlareddy
started this conversation in
General
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
This is my ldap and RBAC configuration
auth:
type: LDAP
spring:
ldap:
urls: ldap://your-domain.com
base: "cn={0},ou=Users,dc=Ar,dc=Ey"
admin-user: "cn=vd,ou=Users,dc=Ar,dc=Ey"
admin-password: "p***#"
user-filter-search-base: "dc=Ar,dc=Ey"
user-filter-search-filter: "(&(cn={0})(objectClass=user)(|(dc=Ar,dc=Ey)))"
group-filter-search-base: "ou=MyUsers,dc=Ar,dc=Ey"
oauth2:
ldap:
activeDirectory: false
aсtiveDirectory:
domain: Ar.Ey
rbac:
roles:
- clusters: kafka
name: admin
permissions:
- actions: all
resource: audit
- actions: all
resource: clusterconfig
- actions: all
resource: topic
value: .*
- actions: all
resource: consumer
value: .*
- actions: all
resource: schema
value: .*
- actions: all
resource: connect
value: .*
- actions: all
resource: ksql
subjects:
- provider: ldap
type: group
value: "admin-users"
- clusters: kafka
name: readonly
permissions:
- actions:
- view
resource: clusterconfig
- actions:
- VIEW
- MESSAGES_READ
resource: topic
value: .*
- actions:
- view
resource: consumer
value: .*
- actions:
- view
resource: schema
value: .*
- actions:
- view
resource: connect
value: .*
subjects:
- provider: ldap
type: group
value: "admin-readonly"
It is working with admin-user and admin-password iam able to see the cluster because the admin-user which I have given as shown in the above config is present in the admin-users group in the RBAC
Now iam trying to use my user where it is showing invalid credentials the logs are provided below
2024-04-29 12:17:31,329 DEBUG [boundedElastic-2] o.s.s.l.a.BindAuthenticator: Failed to bind with any user DNs [cn=sathishkumar.s,ou=Users,dc=Ar,dc=Ey]
2024-04-29 12:17:31,333 DEBUG [boundedElastic-2] o.s.l.c.s.AbstractContextSource: Got Ldap context on server 'ldap://ldap.your-domain.com'
2024-04-29 12:17:31,334 DEBUG [boundedElastic-2] o.s.s.w.s.a.AuthenticationWebFilter: Authentication failed: Bad credentials
Beta Was this translation helpful? Give feedback.
All reactions