commit 7d8d67aa1e1a23d0012ce3adf238a1f1a478d67e
author Dmitry Stremkouski <dstremkouski@mirantis.com> Wed Nov 15 13:08:19 2017 +0300
committer Filip Pytloun <filip@pytloun.cz> Fri Jan 19 16:52:30 2018 +0100
tree 82a777f440752fed03e967432192b5ac0d47a1f7
parent 3e68a4f78b4bf66070c43954c908e4cdecab5379

Presenting pam_ldap auth for linux feature

This patch implements pam ldap integration for linux host.

Related Prod: PROD-16022
Customer-Found
Change-Id: I2a05cfb4821d176724f03c61253700ef1f4d0bd8

README.rst

diff --git a/README.rst b/README.rst
index 930557b..794b56b 100644
--- a/README.rst
+++ b/README.rst
@@ -1608,6 +1608,29 @@
             - fujitsu_eternus_dxl
             - hitachi_vsp1000
 
+PAM LDAP integration
+
+.. code-block:: yaml
+
+    parameters:
+      linux:
+        system:
+          auth:
+            enabled: true
+            ldap:
+              enabled: true
+              binddn: cn=bind,ou=service_users,dc=example,dc=com
+              bindpw: secret
+              uri: ldap://127.0.0.1
+              base: ou=users,dc=example,dc=com
+              ldap_version: 3
+              pagesize: 65536
+              referrals: off
+              filter:
+                passwd: (&(&(objectClass=person)(uidNumber=*))(unixHomeDirectory=*))
+                shadow: (&(&(objectClass=person)(uidNumber=*))(unixHomeDirectory=*))
+                group:  (&(objectClass=group)(gidNumber=*))
+
 Disabled multipath (the default setup)
 
 .. code-block:: yaml