Skip to main content

LDAP

The LDAP check:

  • Binds using the provided username and password to the LDAP host. It supports LDAP/LDAPS protocols.
  • Searches an object type in the provided bindDN.
apiVersion: canaries.flanksource.com/v1
kind: Canary
metadata:
name: ldap-check
spec:
interval: 30
ldap:
- name: ldap-org
host: ldap://apacheds.ldap.svc:10389
username:
# value: uid=admin,ou=system
valueFrom:
secretKeyRef:
name: ldap-credentials
key: USERNAME
password:
valueFrom:
secretKeyRef:
name: ldap-credentials
key: PASSWORD
bindDN: ou=users,dc=example,dc=com
userSearch: "(&(objectClass=organizationalPerson))"
FieldDescriptionSchemeRequired
nameName of the checkstringYes
bindDNBindDN to use in querystringYes
userSearchUserSearch to use in querystringYes
*All other common fieldsCommon
Connection
connectionPath of existing connection e.g. connection://alertmanager/instance/ Mutually exclusive with username, password, hostConnection
hostHost endpoint mutually exclusive with connectionstring
usernameMutually exclusive with connectionEnvVar
passwordMutually exclusive with connectionEnvVar
skipTLSVerifySkip check of LDAP server TLS certificatesbool