Configuring the gateway to use LDAP

Configure the Ceoh Object Gateway to be able to use LDAP.

  1. Change the Ceph configuration with the following commands on all the Ceph nodes.

    Syntax

    ceph config set client.rgw OPTION VALUE
    [ceph: root@host01 /]# ceph config set client.rgw rgw_ldap_uri ldaps://:636
    [ceph: root@host01 /]# ceph config set client.rgw rgw_ldap_binddn "ou=poc,dc=example,dc=local"
    [ceph: root@host01 /]# ceph config set client.rgw rgw_ldap_searchdn "ou=poc,dc=example,dc=local"
    [ceph: root@host01 /]# ceph config set client.rgw rgw_ldap_dnattr "uid"
    [ceph: root@host01 /]# ceph config set client.rgw rgw_s3_auth_use_ldap true
  2. Restart the Ceph Object Gateway.

    Note: Use the output from the ceph orch ps command, under the NAME column, to get the SERVICE_TYPE.ID information.
    1. To restart the Ceph Object Gateway on an individual node in the storage cluster.

      Syntax

      systemctl restart ceph-CLUSTER_ID@SERVICE_TYPE.ID.service

      Example

      [root@host01 ~]# systemctl restart ceph-c4b34c6f-8365-11ba-dc31-529020a7702d@rgw.realm.zone.host01.gwasto.service
    2. To restart the Ceph Object Gateways on all nodes in the storage cluster.

      Syntax

      ceph orch restart SERVICE_TYPE

      Example

      [ceph: root@host01 /]# ceph orch restart rgw