Artifactory LDAP组动态映射策略不适用于用户条目

时间:2019-05-08 13:57:12

标签: artifactory

我有一个LDAP服务器(自定义),该服务器在用户查询时返回以下信息:

❯ ldapsearch -x -h 127.0.0.1 -p 9389 -D cn=worker1,ou=users -w workinghard  -b 'ou=users'
# extended LDIF
#
# LDAPv3
# base <ou=users> with scope subtree
# filter: (objectclass=*)
# requesting: ALL
#

# worker1, users
dn: cn=worker1,ou=users
cn: worker1
sAMAccountName: worker1
email: worker1@bigorg.com
mail: worker1@bigorg.com
userPrincipalName: worker1@users
objectClass: posixAccount
memberof: cn=bigorg,ou=orgs

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1

“人工LDAP组”页面在“动态映射”方面提到以下内容:

    Dynamic: User objects are aware of what groups they belong to, but the group objects are not aware of their members.
    Each user object contains a custom attribute, such as group, that holds the group DNs or group names of which the user is a member.

参考:https://www.jfrog.com/confluence/display/RTF/LDAP+Groups

Artifactory UI中的以下条目应该是什么?

1. Group Member Attribute
2. Group Name Attribute
3. Filter

设置以下内容无效:

1. memberof
2. cn
3. objectClass: posixAccount

动态映射应该对用户输入有效吗?但是从用户界面看来,它似乎仅适用于组成员。

这是我的设置: LDAP Dynamic Setting

这是它发现的组: Discovered Groups

以上是错误的,因为这些是用户而不是组。 谢谢!

0 个答案:

没有答案