ReferenceAIStor Clientmc idp ldap policy

mc idp ldap policy detach

The mc idp ldap policy detach command detaches one or more polices from an entity.

Syntax

The following example detaches the policy userpolicy from the user bobfisher on the myaistor deployment.

mc idp ldap policy detach myaistor                                                 \
                          userpolicy                                               \
                          --user='uid=bobfisher,ou=people,ou=hwengg,dc=min,dc=io'

The command has the following syntax:

mc [GLOBALFLAGS] idp ldap policy detach             \
                                 ALIAS[:CONFIG_NAME] \
                                 POLICYNAME         \
                                 [POLICY2] ...      \
                                 --user=`USER` | --group=`GROUP`

  • Replace ALIAS with the alias of a MinIO AIStor deployment to configure for AD/LDAP integration.

  • Optionally append :CONFIG_NAME to specify a non-default LDAP configuration.

  • Replace POLICYNAME with the policy to detach from the entity. You may list multiple policies to detach from the entity.

  • Use must use one of either the --user or --group flag. You may only use the flag once in the command. You cannot use both flags in the same command.

  • Brackets [] indicate optional parameters.

  • Parameters sharing a line are mutually dependent.

  • Parameters separated using the pipe | operator are mutually exclusive.

Copy the example to a text editor and modify as-needed before running the command in the terminal/shell.

Parameters

ALIAS[:CONFIG_NAME]

Required

The alias of the MinIO AIStor deployment with the entity from which to detach a policy.

Optionally append :CONFIG_NAME to use a non-default LDAP configuration. If not specified, the command uses the default LDAP configuration.

Examples

Detach policies from a group

The following example detaches two policies, policy1 and policy2, from the projectb group on the myaistor deployment:

mc idp ldap policy detach myaistor                                                \
                          policy1                                                 \
                          policy2                                                 \
                          --group='cn=projectb,ou=groups,ou=swengg,dc=min,dc=io'

Detach a policy using a non-default LDAP configuration

The following example detaches a policy using the LDAP configuration named myldap instead of the default configuration.

mc idp ldap policy detach myaistor:myldap                                          \
                          userpolicy                                               \
                          --user='uid=bobfisher,ou=people,ou=hwengg,dc=min,dc=io'

Global flags

This command supports any of the global flags.

Behavior

S3 compatibility

This command uses a MinIO AIStor administrative API and does not work against other S3-compatible services.

mc idp ldap policy attach

Previous Page

mc idp ldap policy entities

Next Page

On this page

SyntaxParametersALIAS[:CONFIG_NAME]ExamplesDetach policies from a groupDetach a policy using a non-default LDAP configurationGlobal flagsBehaviorS3 compatibility