]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commit
rgw: LDAP pass-through authentication
authorMatt Benjamin <mbenjamin@redhat.com>
Sat, 14 Nov 2015 19:51:13 +0000 (14:51 -0500)
committerYehuda Sadeh <yehuda@redhat.com>
Sat, 12 Mar 2016 17:57:12 +0000 (09:57 -0800)
commit38fd3f190a45f944b745fb2c1a9e5e9623017202
tree6197514782e4b86e19c5c9dbe2b2bf026e0f566e
parent2bb6ef9d84beb9dd6b47eacf79989e7c27eeb272
rgw: LDAP pass-through authentication

Implement a new external authenticator based on LDAP and the
new external token format.

External LDAP auth now works, at least with openldap/X.500 style
naming and ldaps:// (SSL).

The latter is AD-friendly, but since AD uses dnattr=cn (IIRC)
everywhere, AD will need testing.

Signed-off-by: Matt Benjamin <mbenjamin@redhat.com>
24 files changed:
CMakeLists.txt
cmake/modules/FindOpenLdap.cmake [new file with mode: 0644]
src/CMakeLists.txt
src/common/config_opts.h
src/rgw/Makefile.am
src/rgw/librgw.cc
src/rgw/rgw_file.h
src/rgw/rgw_ldap.cc [new file with mode: 0644]
src/rgw/rgw_ldap.h [new file with mode: 0644]
src/rgw/rgw_lib.h
src/rgw/rgw_op.cc
src/rgw/rgw_process.h
src/rgw/rgw_rest_config.cc
src/rgw/rgw_rest_log.cc
src/rgw/rgw_rest_metadata.cc
src/rgw/rgw_rest_opstate.cc
src/rgw/rgw_rest_realm.cc
src/rgw/rgw_rest_replica_log.cc
src/rgw/rgw_rest_s3.cc
src/rgw/rgw_rest_s3.h
src/rgw/rgw_rest_user.cc
src/test/CMakeLists.txt
src/test/Makefile-client.am
src/test/test_rgw_ldap.cc [new file with mode: 0644]