GitLab使用FreeIPA/IDM认证

原创

已于 2024-05-13 16:26:34 修改 · 295 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#linux #运维开发 #gitlab

于 2024-05-10 14:15:45 首次发布

LDAP Setup

新建LDAP用户gitlab.connector，用于GitLab和FeeIPA对接。

新建LDAP用户组gitlabusers，组内用户可访问登录GitLab。

GitLab Configuration

修改GitLab配置文件/etc/gitlab/gitlab.rb中LDAP部分：

# vim /etc/gitlab/gitlab.rb
...
### LDAP Settings
###! Docs: https://docs.gitlab.com/omnibus/settings/ldap.html
###! **Be careful not to break the indentation in the ldap_servers block. It is
###!   in yaml format and the spaces must be retained. Using tabs will not work.**

gitlab_rails['ldap_enabled'] = true
gitlab_rails['prevent_ldap_sign_in'] = false

###! **remember to close this block with 'EOS' below**
gitlab_rails['ldap_servers'] = YAML.load <<-'EOS'
  main:
    label: 'LDAP'
    host: 'ipa.example.com/IP'
    port: 389
    uid: 'uid'
    bind_dn: 'uid=gitlab.connector,cn=users,cn=accounts,dc=example,dc=com'
    password: 'PASSWORD'
    encryption: 'start_tls'
    verify_certificates: false
    smartcard_auth: false
    active_directo