Differences

This shows you the differences between two versions of the page.

--- technical:ldap-integration-rba [2025/06/08 05:28] – system
+++ technical:ldap-integration-rba [2025/06/08 06:35] (current) – [Adjusting the rights of a role] system
@@ Line 31: / Line 31: @@
 {{:technical:ldap:ldap_rba_common.png|}}
 </panel>
-  - **Client connects:** The LDAP client (e.g., a user authentication script) connects to the LDAP server.
+  * The LDAP group to RBA mapping is optional functionality available as a complement to the standard LDAP integration.
-  - **Bind request:** The client sends a bind request to the server, which includes the username (or DN) and password.
+  * To ensure that the LDAP user has a pleasant experience the first time they log in, we pre-define the default Cloud and Realm they will be assigned to.
-  - **Server authenticates:** The server checks the username and password against its stored credentials.
+  * As stated earlier, we also give the option to specify the attribute that will contain the groups the user belongs to.
-  - **Bind response:** If the credentials are valid, the server responds with a bind response, indicating a successful connection.
+  * The recommended value is //memberof//, all in lowercase.
 -----------------
@@ Line 41: / Line 41: @@
 {{:technical:ldap:ldap_rba_admin.png|}}
 </panel>
-  - **Client connects:** The LDAP client (e.g., a user authentication script) connects to the LDAP server.
+   * The Admin role will typically include the most components to include.
-  - **Bind request:** The client sends a bind request to the server, which includes the username (or DN) and password.
-  - **Server authenticates:** The server checks the username and password against its stored credentials.
-  - **Bind response:** If the credentials are valid, the server responds with a bind response, indicating a successful connection.
 -----------------
@@ Line 51: / Line 48: @@
 {{:technical:ldap:ldap_rba_operator.png|}}
 </panel>
-  - **Client connects:** The LDAP client (e.g., a user authentication script) connects to the LDAP server.
+  * The Operator role will typically have less components selected compared to the Admin role, but more components then the View role.
-  - **Bind request:** The client sends a bind request to the server, which includes the username (or DN) and password.
-  - **Server authenticates:** The server checks the username and password against its stored credentials.
-  - **Bind response:** If the credentials are valid, the server responds with a bind response, indicating a successful connection.
 -----------------
@@ Line 61: / Line 55: @@
 {{:technical:ldap:ldap_rba_view.png|}}
 </panel>
-  - **Client connects:** The LDAP client (e.g., a user authentication script) connects to the LDAP server.
+  * The View role will typically have the least components selected of the available three roles.
-  - **Bind request:** The client sends a bind request to the server, which includes the username (or DN) and password.
-  - **Server authenticates:** The server checks the username and password against its stored credentials.
-  - **Bind response:** If the credentials are valid, the server responds with a bind response, indicating a successful connection.
----------
+---------
+====== Adjusting the rights of a role ======
+  * Should you need to adjust the rights for one of the roles, there is a dedicated section in the Wiki which covers that topic.