From e4201ef28c8fb797aed3fecb75e042e4b8b5f52e Mon Sep 17 00:00:00 2001 From: David Deyo Date: Mon, 15 Oct 2018 13:48:09 -0700 Subject: [PATCH] Delete enable-ldap-config-file.html --- .../enable-ldap-config-file.html | 68 ------------------- 1 file changed, 68 deletions(-) delete mode 100644 ee/ucp/admin/configure/_site/external-auth/enable-ldap-config-file.html diff --git a/ee/ucp/admin/configure/_site/external-auth/enable-ldap-config-file.html b/ee/ucp/admin/configure/_site/external-auth/enable-ldap-config-file.html deleted file mode 100644 index bf1cc07c30..0000000000 --- a/ee/ucp/admin/configure/_site/external-auth/enable-ldap-config-file.html +++ /dev/null @@ -1,68 +0,0 @@ -

Docker UCP integrates with LDAP directory services, so that you can manage -users and groups from your organization’s directory and automatically -propagate this information to UCP and DTR. You can set up your cluster’s LDAP -configuration by using the UCP web UI, or you can use a -UCP configuration file.

- -

To see an example TOML config file that shows how to configure UCP settings, -run UCP with the example-config option. -Learn about UCP configuration files.

- -
docker container run --rm /: example-config
-
- -

Set up LDAP by using a configuration file

- -
    -
  1. -

    Use the following command to extract the name of the currently active -configuration from the ucp-agent service.

    - - 
        
-$ CURRENT_CONFIG_NAME=$(docker service inspect --format '{{ range $config := .Spec.TaskTemplate.ContainerSpec.Configs }}{{ $config.ConfigName }}{{ "\n" }}{{ end }}' ucp-agent | grep 'com.docker.ucp.config-')
-    
-
    -
    2. -
  2. -

    Get the current configuration and save it to a TOML file.

    - - 
        
-docker config inspect --format '{{ printf "%s" .Spec.Data }}' $CURRENT_CONFIG_NAME > config.toml
-    
-
    -
    3. -
  3. -

    Use the output of the example-config command as a guide to edit your -config.toml file. Under the [auth] sections, set backend = "ldap" -and [auth.ldap] to configure LDAP integration the way you want.

    -
    4. -
  4. -

    Once you’ve finished editing your config.toml file, create a new Docker -Config object by using the following command.

    - - 
    NEW_CONFIG_NAME="com.docker.ucp.config-$(( $(cut -d '-' -f 2 <<< "$CURRENT_CONFIG_NAME") + 1 ))"
-docker config create $NEW_CONFIG_NAME config.toml
-
    -
    5. -
  5. -

    Update the ucp-agent service to remove the reference to the old config -and add a reference to the new config.

    - - 
    docker service update --config-rm "$CURRENT_CONFIG_NAME" --config-add "source=${NEW_CONFIG_NAME},target=/etc/ucp/ucp.toml" ucp-agent
-
    -
    6. -
  6. -

    Wait a few moments for the ucp-agent service tasks to update across -your cluster. If you set jit_user_provisioning = true in the LDAP -configuration, users matching any of your specified search queries will -have their accounts created when they log in with their username and LDAP -password.

    -
    7. -
- -

Where to go next

- -