Wednesday, July 17, 2013

Configuring LDAP on CloudStack 4.1 using CloudMonkey [feedly]

Configuring LDAP on CloudStack 4.1 using CloudMonkey
http://kirkjantzer.blogspot.com/2013/07/configuring-ldap-on-cloudstack-41-using.html

So, in a previous post, I wrote about how to setup LDAP authentication for CloudStack. That is the old way. THIS is the NEW way! :-)

So, after you get CloudStack installed, you'll want to install CloudMonkey somewhere - for testing purposes, I just installed it on my master server. 

Before doing this, you'll need an account created in CloudStack to match that of the one you want to use as the authenticator for the LDAP server. I created an account for myself, and used that to bind to my LDAP account.

Once it's installed and configured, and you've sync'ed over the API commands from your master server, change the following command to meet your needs, and run it:
 ldap config hostname=dc1.city.domain.com searchbase=CN=Users,DC=city,DC=domain,DC=com queryfilter=(uid=%u) binddn=CN='Kirk Jantzer',CN=Users,DC=city,DC=domain,DC=com bindpass=password port=389 

If it is successful, you will see the following:
 ldapconfig: 
binddn = CN=Kirk Jantzer,CN=Users,DC=city,DC=domain,DC=com
hostname = dc1.city.domain.com
port = false
queryfilter = (uid=%u)
searchbase = CN=Users,DC=city,DC=domain,DC=com

And that's it. You should now be able to login to your CloudStack server with your LDAP account! 

I'll cover CloudMonkey more in upcoming posts, but I keep seeing LDAP authentication asked about on the mailing list, so I figured I'd update my post to get the info out there.

As always, comments/questions/critiques welcome! 


No comments:

Post a Comment