You are viewing docs from a branch that is no longer active. You might want to view docs for the 2015.8.x release instead.
salt.auth.ldap¶
Provide authentication using simple LDAP binds
| depends: |
|
|---|
-
salt.auth.ldap.auth(username, password)¶ Simple LDAP auth
-
salt.auth.ldap.groups(username, **kwargs)¶ Authenticate against an LDAP group
Behavior is highly dependent on if Active Directory is in use.
AD handles group membership very differently than OpenLDAP. See the External Authentication documentation for a thorough discussion of available parameters for customizing the search.
OpenLDAP allows you to search for all groups in the directory and returns members of those groups. Then we check against the username entered.
