gitlab 11.2.3 通过LDAP 调用FreeIPA 登录

Posted 2021-01-03

FreeIPA 和 Gitlab 的搭建，可以参考我之前的博客。

FreeIPA域名 server.zhuxu.co（内部测试，修改一下gitlab的host文件 ip FreeIPA域名 ）

vim  /etc/gitlab/gitlab.rb

gitlab_rails[‘ldap_enabled‘] = true
gitlab_rails[‘ldap_servers‘] = YAML.load <<-‘EOS‘
   main: # ‘main‘ is the GitLab ‘provider ID‘ of this LDAP server
     label: ‘LDAP‘
     host: ‘192.168.100.23‘
     port: 389
     uid: ‘uid‘
     bind_dn: ‘uid=admin,cn=users,cn=accounts,dc=zhuxu,dc=co‘
     password: ‘123456‘
     encryption: ‘plain‘ # "start_tls" or "simple_tls" or "plain"
     verify_certificates: true
     active_directory: true
     allow_username_or_email_login: true
     lowercase_usernames: false
     block_auto_created_users: false
     base: ‘dc=zhuxu,dc=co‘
     user_filter: ‘‘
     attributes:
       username: [‘uid‘, ‘userid‘, ‘sAMAccountName‘]
       email:    [‘mail‘, ‘email‘, ‘userPrincipalName‘]
       name:       ‘cn‘
       first_name: ‘givenName‘
       last_name:  ‘sn‘
     admin_group: ‘cn=admins‘
     sync_ssh_keys: true
EOS

gitlab-ctl reconfigure
gitlab-ctl restart