mc idp ldap policy attach
The mc idp ldap policy attach command attaches one or more polices to an entity.
Syntax
The following example attaches the policy userpolicy to the user bobfisher on the myaistor deployment:
mc idp ldap policy attach myaistor \
userpolicy \
--user='uid=bobfisher,ou=people,ou=hwengg,dc=min,dc=io'The command has the following syntax:
mc [GLOBALFLAGS] idp ldap policy attach \
ALIAS[:CONFIG_NAME] \
POLICYNAME \
[POLICY2] ... \
--user=`USER` | --group=`GROUP`-
Replace
ALIASwith the alias of a MinIO AIStor deployment to configure for AD/LDAP integration. -
Optionally append
:CONFIG_NAMEto specify a non-default LDAP configuration. -
Replace
POLICYNAMEwith the policy to attach to the entity. You may list multiple policies to attach to the entity. -
Use must use one of either the
--useror--groupflag. You may only use the flag once in the command. You cannot use both flags in the same command. -
Brackets
[]indicate optional parameters. -
Parameters sharing a line are mutually dependent.
-
Parameters separated using the pipe
|operator are mutually exclusive.
Copy the example to a text editor and modify as-needed before running the command in the terminal/shell.
Parameters
ALIAS[:CONFIG_NAME]
Required
The alias of the MinIO AIStor deployment with the entity to which to attach a policy.
Optionally append :CONFIG_NAME to use a non-default LDAP configuration.
If not specified, the command uses the default LDAP configuration.
Examples
Attach policies to a group
The following example attaches two policies, policy1 and policy2, to the projectb group on the myaistor deployment:
mc idp ldap policy attach myaistor \
policy1 \
policy2 \
--group='cn=projectb,ou=groups,ou=swengg,dc=min,dc=io'Attach a policy using a non-default LDAP configuration
The following example attaches a policy using the LDAP configuration named myldap instead of the default configuration.
mc idp ldap policy attach myaistor:myldap \
userpolicy \
--user='uid=bobfisher,ou=people,ou=hwengg,dc=min,dc=io'Global flags
This command supports any of the global flags.
Behavior
S3 compatibility
This command uses a MinIO AIStor administrative API and does not work against other S3-compatible services.