washmor.blogg.se

If undefined, all users will be superusers and data profilers. If defined, these configurations allow you to specify LDAP groups that users must belong to in order to have superuser (admin) and data-profiler permissions. The superuser_filter and data_profiler_filter are optional.

This sometimes comes up # when using hosted ldap services. # This option tells ldap3 to ignore schemas that are considered malformed. # Set search_scope to one of them: BASE, LEVEL, SUBTREE # Set search_scope to SUBTREE if using Active Directory, and not specifying an Organizational Unit search_scope = LEVEL Superuser_filter = memberOf = CN =airflow-super-users,OU =Groups,OU =RWC,OU =US,OU =NORAM,DC =example,DC =comĭata_profiler_filter = memberOf = CN =airflow-data-profilers,OU =Groups,OU =RWC,OU =US,OU =NORAM,DC =example,DC =comīind_user = cn =Manager,dc =example,dc =com # group_member_attr should be set accordingly with *_filter # eg : # group_member_attr = groupMembership # superuser_filter = groupMembership=CN=airflow-super-users. # in case of Active Directory you would use: user_name_attr = sAMAccountName user_name_attr = uid # set a connection without encryption: uri = ldap://: uri = ldaps://: Rendering Airflow UI in a Web Frame from another siteĪuth_backend = .ldap_auth.