ldappassword

Documentation

Index

• func New(providerName string, options Options, mapper authapi.UserIdentityMapper) (authenticator.Password, error)
• type Authenticator
  • func (a *Authenticator) AuthenticatePassword(username, password string) (user.Info, bool, error)
• type Options

Functions

func New

func New(providerName string, options Options, mapper authapi.UserIdentityMapper) (authenticator.Password, error)

New returns an authenticator which will validate usernames/passwords using LDAP.

Types

type Authenticator

type Authenticator struct {
	// contains filtered or unexported fields
}

Authenticator validates username/passwords against an LDAP v3 server

func (*Authenticator) AuthenticatePassword

func (a *Authenticator) AuthenticatePassword(username, password string) (user.Info, bool, error)

AuthenticatePassword validates the given username and password against an LDAP server

type Options

type Options struct {
	// URL is a parsed RFC 2255 URL
	URL ldaputil.LDAPURL
	// ClientConfig holds information about connecting with the LDAP server
	ClientConfig ldaputil.LDAPClientConfig

	// BindDN is the optional username to bind to for the search phase. If specified, BindPassword must also be set.
	BindDN string
	// BindPassword is the optional password to bind to for the search phase.
	BindPassword string

	// UserAttributeDefiner defines the values corresponding to OpenShift Identities in LDAP entries
	// by using a deterministic mapping of LDAP entry attributes to OpenShift Identity fields. The first
	// attribute with a non-empty value is used for all but the latter identity field. If no LDAP attributes
	// are given for the ID address, login fails.
	UserAttributeDefiner ldaputil.LDAPUserAttributeDefiner
}

Options contains configuration for an Authenticator instance