气流LDAP超级用户身份验证

本文介绍了气流LDAP超级用户身份验证的处理方法，对大家解决问题具有一定的参考价值，需要的朋友们下面随着小编来一起学习吧！ 问题描述

我正在使用Airflow v1.9.0，并尝试使用LDAP身份验证来设置组.我可以获得基本的LDAP身份验证，它将所有用户默认为超级用户.但是，我无法获得与特定人群匹配的广告.例如，我有一个用户TommyLeeJones，我知道它是MIB用户组的一部分，但是我无法获得让该用户与该组相匹配的气流.

I am using Airflow v1.9.0 and am trying to setup groups using LDAP authentication. I can get the basic LDAP authentication working that defaults all users to be superusers. However, I cannot get the AD to match against a specific group. For instance, I have user TommyLeeJones who I know is part of the user group MIB, but I can't get airflow to match this user against this group.

在我的airflow.cfg文件中，我已设置:

In my airflow.cfg file, I have set:

[webserver] authenticate = True auth_backend = airflow.contrib.auth.backends.ldap_auth [ldap] user_filter = objectClass=* user_name_attr=sAMAccountName

在我的webserver.env文件中，我有:

In my webserver.env file, I have:

AIRFLOW__LDAP__URI = zartha.men.in.black:389AIRFLOW__LDAP__BIND_USER = men \ TommyLeeJonesAIRFLOW__LDAP__BIND_PASSWORD = APersonIsSmartPeopleAreDumb AIRFLOW__LDAP__SUPERUSER_FILTER = memberOf = CN = MIB，OU = UK，OU = Groups，DC = men，DC = in，DC = blackAIRFLOW__LDAP__DATA_PROFILER_FILTER = memberOf = CN = MIB，OU = UK，OU = Groups，DC = men，DC = in，DC = blackAIRFLOW__LDAP__BASEDN = DC = men，DC = in，DC = blackAIRFLOW__LDAP__SEARCH_SCOPE = SUBTREE

我可以登录，但不能以超级用户身份登录.

I can login, but not as a superuser which I should be able to.

推荐答案

使用LDAP时，我发现我通常会拼写错误的LDAP查询.

When working with LDAP, I find that I'm usually misspelling my LDAP query.

确认 AIRFLOW__LDAP__SUPERUSER_FILTER 是正确的.

您可以使用 ldap3 Python程序包，并在命令行中确认其有效.

You can use ldap3 Python package and confirm from the command line this works.