add role for LDAP user with short name

2017-09-18 Thread Tran Tien Dung
Hi everyone,
I user LDAP to login openshift, when I want to add role to ldap user on
project, I have to use a full DN like "CN=Dung Tran Tien,OU=Ict
Team,OU=Users,OU=AAVN_HCM,DC=aavn,DC=local" ,please see the result of
command " oc get user --o json"  and below


It does not show a short name

is there any thing I need to do in LDAP configuration? here is my config

>  identityProviders:
>
>   - name: "Active_Directory"
>
> challenge: true
>
> login: true
>
> provider:
>
>   apiVersion: v1
>
>   kind: LDAPPasswordIdentityProvider
>
>   attributes:
>
> id:
>
> - dn
>
> email:
>
> - mail
>
> name:
>
> - cn
>
> preferredUsername:
>
> - uid
>
>   bindDN: "cn=u1,dc=aavn,dc=local"
>
>   bindPassword: ""
>
>   insecure: true
>
>   url: "ldap://adv1.aavn.local:389/...
>
>
Please advise me how to fix that.
Thanks.
___
dev mailing list
dev@lists.openshift.redhat.com
http://lists.openshift.redhat.com/openshiftmm/listinfo/dev


Re: add role for LDAP user with short name

2017-09-18 Thread Jordan Liggitt
You likely want to specify sAMAccountName as the preferred username
attribute. Note that this would only apply to new users. Existing users
would retain their long username.



On Sep 18, 2017, at 11:07 PM, Tran Tien Dung  wrote:

Hi everyone,
I user LDAP to login openshift, when I want to add role to ldap user on
project, I have to use a full DN like "CN=Dung Tran Tien,OU=Ict
Team,OU=Users,OU=AAVN_HCM,DC=aavn,DC=local" ,please see the result of
command " oc get user --o json"  and below


It does not show a short name

is there any thing I need to do in LDAP configuration? here is my config

>  identityProviders:
>
>   - name: "Active_Directory"
>
> challenge: true
>
> login: true
>
> provider:
>
>   apiVersion: v1
>
>   kind: LDAPPasswordIdentityProvider
>
>   attributes:
>
> id:
>
> - dn
>
> email:
>
> - mail
>
> name:
>
> - cn
>
> preferredUsername:
>
> - uid
>
>   bindDN: "cn=u1,dc=aavn,dc=local"
>
>   bindPassword: ""
>
>   insecure: true
>
>   url: "ldap://adv1.aavn.local:389/...
>
>
Please advise me how to fix that.
Thanks.

___
dev mailing list
dev@lists.openshift.redhat.com
http://lists.openshift.redhat.com/openshiftmm/listinfo/dev
___
dev mailing list
dev@lists.openshift.redhat.com
http://lists.openshift.redhat.com/openshiftmm/listinfo/dev