chef/doc/ldap.md
Sebastian Kippe 73e87f8f45
Improve LDAP example command
We should not log passwords in bash history files. This change will
prompt the user for the password instead.
2020-04-19 13:01:39 +02:00

17 lines
424 B
Markdown

# LDAP (389 Directory Server)
## Credentials
The admin account is `cn=Directory Manager` with the password stored in the
encrypted data bag `admin_password` item
```
$ knife data bag show credentials dirsrv --secret-file .chef/encrypted_data_bag_secret
```
## Example search (will prompt for password):
```
$ ldapsearch -x -W -D 'cn=Directory Manager' -b "ou=users,dc=kosmos,dc=org" -H "ldaps://ldap.kosmos.org" -v
```