public/rancher-docs
1
0
Fork 0
mirror of https://github.com/rancher/rancher-docs.git synced 2026-09-24 20:18:18 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update _index.md

Browse Source
This commit is contained in:
Denise
2018-06-08 10:54:37 -07:00
committed by Mark Bishop
parent 2087d43b5f
commit ba4bf7c540
1 changed files with 24 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/rancher/v2.x/en/tasks/global-configuration/authentication/_index.md
+24 -1
View File
@@ -35,12 +35,22 @@ In environments using Microsoft Active Directory (AD), you can configure Rancher
4. Complete the **Configure an Active Directory server** form.
<<<<<<< HEAD
You may need to log in to your domain controller to find the information requested in the form.
=======
>**Using TLS?**
>
Make sure you have an LDAP certificate installed.
>>>>>>> Update _index.md
>**User Search Base vs. Group Search Base**
>
>When configuring AD authentication, you must enter a search base for your users. This base allows Rancher to search for users that are in your Active Directory. (Please note, this field is only for seach bases and not for search filters)
>When configuring AD authentication, you must enter a search base for your users. This search base allows Rancher to search for users that are in your Active Directory.
> **Note:** This field is only for search bases and not for search filters.
- If your users and groups are in the search base, complete only the User Search Base.
<<<<<<< HEAD
- If your groups are in a different search base, you can optionally complete the Group Search Base. This field is dedicated to searching groups, but is not required.
5. Customize Schema section contains some AD specific attributes for users and groups.
@@ -48,6 +58,19 @@ If your Active Directory deviates from the standard AD schema, complete the **Cu
From 2.0.1 onwards while setting up AD, under Customize Schema, the Search Attribute for User has three fields `sAMAccountName|sn|givenName`. This means once AD is configured, when the user enters anything in the text box for searching, Rancher queries the AD server and finds that user by sAMAccountName, or last name, or first name. While searching, Rancher performs a begins with search match. This is the default value, but it is configurable.
Rancher creates search filters for users and groups based on the values of `Search Attribute` for Users and Groups. (Please note, this field does not accept search filters)
=======
- If you want to search for groups in a different search base, you can _optionally_ complete the Group Search Base. This field is dedicated to searching groups, and is **not** required.
4. If your Active Directory deviates from the standard AD schema, complete the **Customize Schema** form to match it. Otherwise, skip this step.
>**Search Attribute** As of v2.0.1, the search attribute is defaulted with three specific search fields `sAMAccountName|sn|givenName`. After AD is configured, whenver a user enters text to add users or groups, Rancher automatically queries the AD server and attempts to match fields by sAMAccountName, last name, or first name. Rancher specifically searches for users/groups that begin with the text inputted in the search field.
>
> The default field is `sAMAccountName|sn|givenName`, but this field can be configured to a subset of these fields. The pipe (`|`) between the fields separates these fields.
> * `sAMAccountName`: Username
> * `sn`: Last Name
> * `givenName`: First Name
>
> With this search attribute, Rancher creates search filters for users and groups, but you *cannot* add your own search filters in this field.
>>>>>>> Update _index.md
6. Enter your AD username and password in **Test and enable authentication** to confirm that Rancher is configured to use AD authentication.