Jenkins – Lost LDAP admin
devops-db.com Preparation. As mentioned in the Jenkins integration post with LDAP, Jenkins, by default, does not mix authentication types, it is either LDAP or native. In other words, something misconfigured, lost…
Jenkins – LDAP – Manage and Assign Roles
After finishing the integration of Jenkins with LDAP, this post shows how to create permission roles based on user groups (memberOf). As I said in the previous post, I created…
Jenkins – LDAP Integration
Preparation. In this post, I will show you how to configure Jenkins integration with LDAP and assign permissions. In Jenkins the configuration is a little different, as it is more…
LDAP authentication – Linux Ubuntu
In this topic, I will show how I have configured authentication for Linux/Ubuntu hosts in the project’s LDAP (https://devops-db.com/category/laboratory/openldap/). To do this, you need to have an LDAP server created…
OpenLDAP – SUDO
For anyone using LDAP authentication on Linux hosts, controlling who can be SUDO on VMs via LDAP makes it much easier, control becomes centralised and not host to host, imagine…
Gitlab – LDAP Integration
Settings There isn’t much of a secret to configuring GitLab to use LDAP integration, but it doesn’t have a graphical mode, we have to change directly in the configuration files…
OpenLDAP – Initial user structure
With all the configurations ready, it’s time to create the first structures of our LDAP.This first structure I will create the groups: I will also create a GitLabGroup group, which…
OpenLDAP – Activation of the MemberOf module
Today in many scenarios, it is much easier to manage permissions if we add users to specific groups and manage permissions, roles, etc. by groups and not user by user.To…
OpenLDAP – Extra settings
Now I’m going to leave here some steps for extra configurations in OpenLDAP.The first and not least important is the Log, as installed by default, OpenLDAP does not have a…
OpenLDAP – Certificate Creation / TLS Activation
This step is still optional, for the basic operation of OpenLDAP it is not necessary, but I wanted to have something a little more complete and secure in the integration…