diff --git a/README.md b/README.md index 463ea89..f63f5b3 100644 --- a/README.md +++ b/README.md @@ -136,6 +136,10 @@ services: Then the service will listen on two ports, one for LDAP and one for the web front-end. +### With Kubernetes + +See https://github.com/Evantage-WS/lldap-kubernetes for a LLDAP deployment for Kubernetes + ### From source To compile the project, you'll need: @@ -250,6 +254,7 @@ folder for help with: - [Nextcloud](example_configs/nextcloud.md) - [Organizr](example_configs/Organizr.md) - [Portainer](example_configs/portainer.md) +- [Rancher](example_configs/rancher.md) - [Seafile](example_configs/seafile.md) - [Syncthing](example_configs/syncthing.md) - [Vaultwarden](example_configs/vaultwarden.md) diff --git a/example_configs/images/rancher_ldap_config.png b/example_configs/images/rancher_ldap_config.png new file mode 100644 index 0000000..dfec864 Binary files /dev/null and b/example_configs/images/rancher_ldap_config.png differ diff --git a/example_configs/rancher.md b/example_configs/rancher.md new file mode 100644 index 0000000..09ee3d0 --- /dev/null +++ b/example_configs/rancher.md @@ -0,0 +1,95 @@ +# Configuration for SUSE Rancher (any version) +### Left (hamburger) menu > Users & Authentication > OpenLDAP (yes, we are using the OpenLDAP config page) +--- + +## LDAP configuration + +#### Hostname/IP +``` +ip-address, DNS name or when running in Kubernetes (see https://github.com/Evantage-WS/lldap-kubernetes), lldap-service.lldap.svc.cluster.local +``` +#### Port +``` +3890 +``` +#### Service Account Distinguished name +A better option is to use a readonly account for accessing the LLDAP server +``` +cn=admin,ou=people,dc=example,dc=com +``` +#### Service Account Password +``` +xxx +``` +#### User Search Base +``` +ou=people,dc=example,dc=com +``` + +#### Group Search Base +``` +ou=groups,dc=example,dc=com +``` + +#### Object Class (users) +``` +inetOrgPerson +``` + +#### Object Class (groups) +``` +groupOfUniqueNames +``` + +#### Username Attribute +``` +uid +``` + +#### Name Attribute +``` +cn +``` + +#### Login Attribute +``` +uid +``` + +#### Group Member User Attribute +``` +dn +``` + +#### User Member Attribute +``` +memberOf +``` + +#### Search Attribute (groups) +``` +cn +``` + +#### Search Attribute (users) +``` +uid|sn|givenName +``` + +#### Group Member Mapping Attribute +``` +member +``` + +#### Group DN Attribute +``` +dn +``` + +##### Choose "Search direct and nested group memberships" + +##### Fill in the username and password of an admin user at Test and Enable Authentication and hit save + +## Rancher OpenLDAP config page + +![Rancher OpenLDAP config page](images/rancher_ldap_config.png) \ No newline at end of file