From 35dfb190f9296c8c1828ab55769ac1a85d9f10e9 Mon Sep 17 00:00:00 2001 From: Tani Fiduccia Date: Wed, 11 Jul 2018 14:43:30 -0700 Subject: [PATCH] Fixes to Authentication documentation --- .../authentication/active-directory/_index.md | 6 +++--- .../global-configuration/authentication/freeipa/_index.md | 2 +- .../global-configuration/authentication/openLDAP/_index.md | 6 +++--- 3 files changed, 7 insertions(+), 7 deletions(-) diff --git a/content/rancher/v2.x/en/tasks/global-configuration/authentication/active-directory/_index.md b/content/rancher/v2.x/en/tasks/global-configuration/authentication/active-directory/_index.md index db729fa2f95..c79513802ca 100644 --- a/content/rancher/v2.x/en/tasks/global-configuration/authentication/active-directory/_index.md +++ b/content/rancher/v2.x/en/tasks/global-configuration/authentication/active-directory/_index.md @@ -22,19 +22,19 @@ In environments using Microsoft Active Directory (AD), you can configure Rancher You may need to log in to your domain controller to find the information requested in the form. >**Using TLS?** - >Make sure you have an LDAP certificate installed. + >If the certificate is self-signed or not from a recognized certificate authority, make sure you provide the complete chain. That chain is needed to verify the server's certificate.

>**User Search Base vs. Group Search Base** > - >Search base allows Rancher to search for users and groups that are in your FreeIPA. These fields are only for search bases and not for search filters. + >Search base allows Rancher to search for users and groups that are in your Active Directory. These fields are only for search bases and not for search filters. > >* If your users and groups are in the same search base, complete only the User Search Base. >* If your groups are in a different search base, you can optionally complete the Group Search Base. This field is dedicated to searching groups, but is not required. 5. If your Active Directory deviates from the standard AD schema, complete the **Customize Schema** form to match it. Otherwise, skip this step. - >**Search Attribute** The Search Attribute field defaults with three specific values: `sAMAccountName|sn|givenName`. After AD is configured, when a user enters text to add users or groups, Rancher automatically queries the AD server and attempts to match fields by sAMAccountName, last name, or first name. Rancher specifically searches for users/groups that begin with the text entered in the search field. + >**Search Attribute** As of Rancher v2.0.1, the Search Attribute field defaults with three specific values: `sAMAccountName|sn|givenName`. After AD is configured, when a user enters text to add users or groups, Rancher automatically queries the AD server and attempts to match fields by sAMAccountName, last name, or first name. Rancher specifically searches for users/groups that begin with the text entered in the search field. > >The default field value `sAMAccountName|sn|givenName`, but you can configure this field to a subset of these fields. The pipe (`|`) between the fields separates these fields. > diff --git a/content/rancher/v2.x/en/tasks/global-configuration/authentication/freeipa/_index.md b/content/rancher/v2.x/en/tasks/global-configuration/authentication/freeipa/_index.md index 90c035d72ea..5f4423261ac 100644 --- a/content/rancher/v2.x/en/tasks/global-configuration/authentication/freeipa/_index.md +++ b/content/rancher/v2.x/en/tasks/global-configuration/authentication/freeipa/_index.md @@ -24,7 +24,7 @@ If your organization uses FreeIPA for user authentication, you can configure Ran You may need to log in to your domain controller to find the information requested in the form. >**Using TLS?** - >Make sure you have an LDAP certificate installed. + >If the certificate is self-signed or not from a recognized certificate authority, make sure you provide the complete chain. That chain is needed to verify the server's certificate.

>**User Search Base vs. Group Search Base** diff --git a/content/rancher/v2.x/en/tasks/global-configuration/authentication/openLDAP/_index.md b/content/rancher/v2.x/en/tasks/global-configuration/authentication/openLDAP/_index.md index 8d1775563c3..773ed4169e0 100644 --- a/content/rancher/v2.x/en/tasks/global-configuration/authentication/openLDAP/_index.md +++ b/content/rancher/v2.x/en/tasks/global-configuration/authentication/openLDAP/_index.md @@ -24,12 +24,12 @@ If your organization uses OpenLDAP for user authentication, you can configure Ra You may need to log in to your domain controller to find the information requested in the form. >**Using TLS?** - >Make sure you have an LDAP certificate installed. + >If the certificate is self-signed or not from a recognized certificate authority, make sure you provide the complete chain. That chain is needed to verify the server's certificate.

>**User Search Base vs. Group Search Base** > - >Search base allows Rancher to search for users and groups that are in your FreeIPA. These fields are only for search bases and not for search filters. + >Search base allows Rancher to search for users and groups that are in your openLDAP. These fields are only for search bases and not for search filters. > >* If your users and groups are in the same search base, complete only the User Search Base. >* If your groups are in a different search base, you can optionally complete the Group Search Base. This field is dedicated to searching groups, but is not required. @@ -37,7 +37,7 @@ If your organization uses OpenLDAP for user authentication, you can configure Ra 5. If your OpenLDAP deviates from the standard OpenLDAP schema, complete the **Customize Schema** form to match it. Otherwise, skip this step. - >**Search Attribute** The Search Attribute field defaults with three specific values: `uid|sn|givenName`. After FreeIPA is configured, when a user enters text to add users or groups, Rancher automatically queries the FreeIPA server and attempts to match fields by user id, last name, or first name. Rancher specifically searches for users/groups that begin with the text entered in the search field. + >**Search Attribute** The Search Attribute field defaults with three specific values: `uid|sn|givenName`. After openLDAP is configured, when a user enters text to add users or groups, Rancher automatically queries the openLDAP server and attempts to match fields by user id, last name, or first name. Rancher specifically searches for users/groups that begin with the text entered in the search field. > >The default field value `uid|sn|givenName`, but you can configure this field to a subset of these fields. The pipe (`|`) between the fields separates these fields. >