You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Aditya Manthramurthy 5f51ef0b40 Add LDAP Lookup-Bind mode (#11318) ... This change allows the MinIO server to be configured with a special (read-only) LDAP account to perform user DN lookups. The following configuration parameters are added (along with corresponding environment variables) to LDAP identity configuration (under `identity_ldap`): - lookup_bind_dn / MINIO_IDENTITY_LDAP_LOOKUP_BIND_DN - lookup_bind_password / MINIO_IDENTITY_LDAP_LOOKUP_BIND_PASSWORD - user_dn_search_base_dn / MINIO_IDENTITY_LDAP_USER_DN_SEARCH_BASE_DN - user_dn_search_filter / MINIO_IDENTITY_LDAP_USER_DN_SEARCH_FILTER This lookup-bind account is a service account that is used to lookup the user's DN from their username provided in the STS API. When configured, searching for the user DN is enabled and configuration of the base DN and filter for search is required. In this "lookup-bind" mode, the username format is not checked and must not be specified. This feature is to support Active Directory setups where the DN cannot be simply derived from the username. When the lookup-bind is not configured, the old behavior is enabled: the minio server performs LDAP lookups as the LDAP user making the STS API request and the username format is checked and configuring it is required.		4 years ago
..
api	fix: strict quorum in list should list on all drives (#11157)	4 years ago
cache	Disallow writeback caching with cache_after (#11002)	4 years ago
compress	Allow Compression + encryption (#11103)	4 years ago
crawler	support envs as well for new crawler sub-system (#11033)	4 years ago
dns	fix: etcd import paths again depend on v3.4.14 release (#11020)	4 years ago
etcd	fix: etcd import paths again depend on v3.4.14 release (#11020)	4 years ago
heal	add support for tuning healing to make healing more aggressive (#11003)	4 years ago
identity	Add LDAP Lookup-Bind mode (#11318)	4 years ago
notify	Set the maximum open connections limit in PG and MySQL target configs (#10558)	4 years ago
policy/opa	fix: if OPA set do not enforce policy claim (#10149)	4 years ago
storageclass	fix: check for O_DIRECT support for reads and writes (#11331)	4 years ago
bool-flag.go	Migrate config to KV data format (#8392)	5 years ago
bool-flag_test.go	Migrate config to KV data format (#8392)	5 years ago
certs.go	move the certPool loader function into pkg/certs (#10239)	4 years ago
certs_test.go	move the certPool loader function into pkg/certs (#10239)	4 years ago
certsinfo.go	print proper certinfo on console when starting up (#9479)	5 years ago
config.go	Add crawler delay config + dynamic config values (#11018)	4 years ago
config_test.go	Add target parsing code for config (#9375)	5 years ago
constants.go	feat: migrate to ROOT_USER/PASSWORD from ACCESS/SECRET_KEY (#11185)	4 years ago
errors-utils.go	fail if port is not accessible (#10616)	4 years ago
errors.go	feat: migrate to ROOT_USER/PASSWORD from ACCESS/SECRET_KEY (#11185)	4 years ago
help.go	Final changes to config sub-system (#8600)	5 years ago
legacy.go	Final changes to config sub-system (#8600)	5 years ago
logger.go	Ignore config values from unknown subsystems (#10432)	4 years ago