Current Environment:
- Gitlab Server: Centos 6.5
- Active Directory: Windows Server 2008 R2
Could anyone check these fictitious settings for Ldap authentication in Gitlab 7.1.1?
gitlab_rails['ldap_enabled'] = true
gitlab_rails['ldap_host'] = 'myserver.dom.com.net'
gitlab_rails['ldap_port'] = 389
gitlab_rails['ldap_uid'] = 'sAMAccountName'
gitlab_rails['ldap_method'] = 'plain' # 'ssl' or 'plain'
gitlab_rails['ldap_bind_dn'] = 'OU=Users,DC=dom,DC=com,DC=net'
gitlab_rails['ldap_password'] = '????'
gitlab_rails['ldap_allow_username_or_email_login'] = true
gitlab_rails['ldap_base'] = 'DC=dom,DC=com,DC=net'
Which ldap_bind_dn has to be set in order to Gitlab works (user account equivalent)?
Which ldap_password has to be set in order to Gitlab works?
I followed suggestions from: @metaDiego and @heinglandreas. Both were in the right path. So I modified my settings in the lines:
Solution
gitlab_rails['ldap_bind_dn'] = 'CN=the_allowed_user_for_access_ldap,OU=Users,DC=dom,DC=com,DC=net'
gitlab_rails['ldap_password'] = 'the_password_of_allowed_user'
The ldap_bind_dn may vary according to the AD structure and the current level where the allowed user is located.
My company AD doesn't allow anonymous Ldap queries. So adding those parameters were mandatory.
Search help in the domain administrators, for getting those parameters.
Useful article from gitlabhq at Github
If gitlab_rails['ldap_allow_username_or_email_login'] = true
, the login user could be with email format or only domain user.