I am not aware of any unique settings for multiple domains on the same domain controller, but I suspect that as long as the configurations are unique, it would work.
I am a software developer, not an IT expert. These configuration items were provided by our IT staff. Once they provided the details, I used ldapsearch on the Gitlab server to confirm the configuration.
For reference, our configuration looks like this:
## LDAP settingsldap:enabled: trueservers:main:label: 'DOMAINA'host: 'dca.domaina.ddd.root'port: 389uid: 'sAMAccountName'method: 'plain'bind_dn: 'notarealu...@domaina.ddd.root'password: 'notARealPassword'active_directory: trueallow_username_or_email_login: truebase: 'OU=ORG,DC=domaina,DC=ddd,DC=root'user_filter: ''domainb: # 'main' is the GitLab 'provider ID' of this LDAP serverlabel: 'DOMAINB'host: 'dcb.domainb.ddd.root'port: 389uid: 'sAMAccountName'method: 'plain'bind_dn: 'notarealu...@domainb.ddd.root'password: 'notARealPassword'active_directory: trueallow_username_or_email_login: truebase: 'OU=Users,OU=DOMAINB,DC=domainb,DC=ddd,DC=root'user_filter: ''new: # 'main' is the GitLab 'provider ID' of this LDAP serverlabel: 'new'host: 'newdc.new.ddd.root'port: 389uid: 'sAMAccountName'method: 'plain'bind_dn: 'notarealu...@new.ddd.root'password: 'notARealPassword'active_directory: trueallow_username_or_email_login: truebase: 'DC=new,DC=ddd,DC=root'user_filter: ''
Hope this helps.
Regards,
Rick
-----Original Message-----
From: Dioram Nepangue
Sent: Apr 27, 2016 9:29 AM
To: GitLab
Cc: dnepan...@gmail.com
Subject: Re: LDAP with Multiple DomainsMay I--know how did you come up with theldap settings? I have 3 domains on oneldapserver andi want those 3 domains to be able to authenticate togitlab usingldap . My current settings fordomainA domain is like this:
ldap:
enabled: true
servers:
main:
label: 'LDAP Auth'
host: '192.168.10.5'
port: 636
uid: 'uid'
method: 'ssl'
bind_dn: 'CN=Manager,dc=domainA,dc=com'
password: 'secret'
allow_username_or_email_login: false
base: 'dc=domainA,dc=com'
user_filter: ' 'Now, I am trying to adddomainB , anddomainC to this setup. How do I add the thosedc's ? What bind_dn: and base: to use?Thanks,
On Tuesday, April 26, 2016 at 6:50:29 PM UTC+8, Rick Bywater wrote:Yes. During one of our upgrades, we successfully implemented it. We currently have four configured domains.
Thanks.
RickOn April 26, 2016 4:20:43 AM EDT, Dioram Nepangue <dnep...@gmail.com> wrote:Hey Rick,Have you implemented the multiple domain in Gitlab?Thanks.Thanks.
On Friday, July 26, 2013 at 11:35:59 PM UTC+8, Rick Bywater wrote: I have been working to get my Gitlab authenticating via LDAP within my company. After a bit of head scratching, I got my domain to work. However, the company has several domains which we would like Gitlab to service. I have not seen any discussion of this. Is there a mechanism for adding multiple domains to the LDAP configuration?Thanks,Rick
--
Sent from my Android device with K-9 Mail. Please excuse my brevity.
You received this message because you are subscribed to a topic in the Google Groups "GitLab" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/gitlabhq/_TGMVY11WhA/unsubscribe.
To unsubscribe from this group and all its topics, send an email to gitlabhq+unsubscr...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/gitlabhq/406f1f20-2d35-4a1e-b64f-4c855e19f8da%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
--
You received this message because you are subscribed to the Google Groups "GitLab" group.
To unsubscribe from this group and stop receiving emails from it, send an email to gitlabhq+unsubscr...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/gitlabhq/25890031.1461774253380.JavaMail.wam%40mswamui-thinleaf.atl.sa.earthlink.net.
For more options, visit https://groups.google.com/d/optout.