mc idp ldap accesskey
The mc idp ldap accesskey commands allow you to list, delete, or display information about LDAP access key pairs on the MinIO AIStor deployment.
This command works against access keys created by an AD/LDAP user after authenticating to MinIO AIStor.
Create AD/LDAP service accounts with the mc idp ldap accesskey create command.
Authenticated users can manage their own long-term Access Keys using the Console UI. MinIO AIStor supports using AssumeRoleWithLDAPIdentity to generate temporary access keys using the Security Token Service.
This command has the following subcommands:
| Subcommand | Description |
|---|---|
create | Add LDAP access key pairs. |
create-with-login | Add an LDAP access key pair by authenticating with the directory rather than as an administrator. |
disable | Disable the specified access key on the MinIO AIStor deployment. |
edit | Modify the specified access key on the specified MinIO AIStor deployment. |
enable | Enable the specified access key on the specified MinIO AIStor deployment. |
info | Output information about the specified access key(s). |
ls | Display a list of LDAP access key pairs. |
rm | Delete the specified access key from the specified MinIO AIStor deployment. |
sts-revoke | Revoke STS tokens for a specified LDAP user. |