Configuring the gateway to use LDAP
Configure the Ceoh Object Gateway to be able to use LDAP.
- Change the Ceph configuration with the following commands on all the Ceph nodes.
Syntax
ceph config set client.rgw OPTION VALUE[ceph: root@host01 /]# ceph config set client.rgw rgw_ldap_uri ldaps://:636 [ceph: root@host01 /]# ceph config set client.rgw rgw_ldap_binddn "ou=poc,dc=example,dc=local" [ceph: root@host01 /]# ceph config set client.rgw rgw_ldap_searchdn "ou=poc,dc=example,dc=local" [ceph: root@host01 /]# ceph config set client.rgw rgw_ldap_dnattr "uid" [ceph: root@host01 /]# ceph config set client.rgw rgw_s3_auth_use_ldap true
-
Restart the Ceph Object Gateway.
Note: Use the output from theceph orch pscommand, under theNAMEcolumn, to get theSERVICE_TYPE.IDinformation.-
To restart the Ceph Object Gateway on an individual node in the storage cluster.
Syntax
systemctl restart ceph-CLUSTER_ID@SERVICE_TYPE.ID.serviceExample
[root@host01 ~]# systemctl restart ceph-c4b34c6f-8365-11ba-dc31-529020a7702d@rgw.realm.zone.host01.gwasto.service -
To restart the Ceph Object Gateways on all nodes in the storage cluster.
Syntax
ceph orch restart SERVICE_TYPEExample
[ceph: root@host01 /]# ceph orch restart rgw
-