egeneralov/vault-ldap-with-freeipa-or-glauth.md

## vault-ldap-with-freeipa-or-glauth.md

      
    Raw
  

              vault-ldap-with-freeipa-or-glauth.md
            
          
    vault ldap

enable ldap auth
vault auth enable ldap

write ldap configuration
vault write auth/ldap/config \
url="ldaps://git.example.com" \
userattr=uid \
userdn="ou=users,dc=example,dc=com" \
groupdn="ou=groups,dc=example,dc=com" \
groupfilter="(&(memberOf=cn=gitlab,ou=services,dc=example,dc=com)(uid={{.Username}}))" \
groupattr="memberOf" \
binddn="cn=vault,ou=services,dc=example,dc=com" \
bindpass='password' \
insecure_tls=false \
starttls=false

test
vault login -method=ldap username=egeneralov

output must be like
Key                    Value
---                    -----
token                  s.gnw6DuK5dHvLEiiB0YukuhsU
token_accessor         BCwqORe0tPHjFWZLfKvoGPcO
token_duration         768h
token_renewable        true
token_policies         ["default"]
identity_policies      []
policies               ["default"]
token_meta_username    egeneralov