mirrors/versitygw
1
0
Fork 0
mirror of https://github.com/versity/versitygw.git synced 2026-07-31 20:36:18 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: add group-based role mapping for FreeIPA IAM

Browse Source 
FreeIPA users were always assigned RoleUser regardless of their
group membership. This adds --ipa-admin-group-cn so that members
of a specified FreeIPA group are automatically granted the admin
role, and  --ipa-enable-userplus to elevate the default role to
userplus for all IPA users. The user_show RPC is updated to
request all attributes so that memberof_group is reliably
returned.
This commit is contained in:
Ben McClelland
2026-05-29 20:55:25 -07:00
parent f7cc70b157
commit 7300306886
5 changed files with 60 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
extra/example.conf
+7
View File
@@ -409,6 +409,13 @@ ROOT_SECRET_ACCESS_KEY=
#VGW_IPA_USER=
# Password of the user used to connect to FreeIPA
#VGW_IPA_PASSWORD=
# FreeIPA group CN whose members are granted the admin role. When set, any
# FreeIPA user that is a member of this group will be assigned the admin role.
# If unset, group membership is not checked for role assignment.
#VGW_IPA_ADMIN_GROUP_CN=
# Grant all FreeIPA users the userplus role by default instead of the user role.
# Members of VGW_IPA_ADMIN_GROUP_CN still receive the admin role regardless.
#VGW_IPA_ENABLE_USERPLUS=false
# Disable verify TLS certificate of FreeIPA server
#VGW_IPA_INSECURE=false
# FreeIPA IAM debug output