It's a good question. I wish it was more clear in that page. GoCD has always had LDAP/AD *authentication* support built into it. That means, you can connect it to an LDAP server and use it to allow people to log in. The username and password you provide is used to bind using LDAP and make sure that you're a valid user. This is what you saw as "bundled with GoCD". The documentation for this is here <https://docs.gocd.org/current/configuration/dev_authentication.html> and here <https://github.com/gocd/gocd-ldap-authentication-plugin>.
With the LDAP *authorization* plugin, the paid one, along with doing *authentication* like the built in one, it allows you to do role management using LDAP. A simple example would be "I want all admins defined in AD, to be GoCD admins" or "I want everyone in AD group XYZ to be part of the GoCD role ABC". This allows you to manage GoCD roles in a central place, that is your LDAP/AD server. If you remove someone from an Active Directory group, they will be removed from the GoCD role. It's easier for bigger organizations to manage roles in one place. The documentation for this is here <https://extensions-docs.gocd.org/ldap/current/>. As you can see from the examples <https://extensions-docs.gocd.org/ldap/current/examples/>, it allows you to configure it in quite complex ways. Hope that helps, Aravind On Fri, Jan 26, 2018 at 5:18 PM, Sree Harsha Subraveti < [email protected]> wrote: > Hi, > I got little confused with LDAP/AD support on GoCD. I saw that there are > two plugins related to LDAP/AD support on GoCD plugins > <https://www.gocd.org/plugins/> page. > > There are two plugins with LDAP/AD. > 1. LDAP/AD plugin(bundled with GoCD)2. LDAP/AD Authorization Plugin(Paid) > Can you clarify if AD can be configured with the bundled version. If yes, > what is the purpose of paid version? > > Thanks, > Harsha. > > -- > You received this message because you are subscribed to the Google Groups > "go-cd" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "go-cd" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
