mc idp ldap policy entities

The mc idp ldap policy entities command displays a list of mappings for a user, group, and/or policy.

Syntax

The following example lists all mappings for a specific policy, a set of groups, and a selection of users on the myaistor deployment.

Specifically, it lists:

Users mapped to the finteam-policy policy.
Policies assigned to the uid=bobfisher,ou=people,ou=hwengg,dc=min,dc=io user.
Policies assigned to the cn=projectb,ou=groups,ou=swengg,dc=min,dc=io group.

mc idp ldap policy entities myaistor                                                 \
                            --policy finteam-policy                                  \
                            --user 'uid=bobfisher,ou=people,ou=hwengg,dc=min,dc=io'  \
                            --group 'cn=projectb,ou=groups,ou=swengg,dc=min,dc=io'

The command has the following syntax:

mc [GLOBALFLAGS] idp ldap policy entities                       \
                                 ALIAS[:CONFIG_NAME]            \
                                 [--group `value`, -g `value`]  \
                                 [--policy `value`, -p `value`] \
                                 [--user `value`, -u `value`]

Replace ALIAS with the alias of a MinIO AIStor deployment to configure for AD/LDAP integration.
Optionally append :CONFIG_NAME to specify a non-default LDAP configuration.
You may use each of the --user, --group, and/or --policy flags as many times as desired in the command.
For each flag, the output lists the entities mapped to the specified policy, user, or group.
Omit all flags to return a list of mappings for all policies.
Brackets [] indicate optional parameters.
Parameters sharing a line are mutually dependent.
Parameters separated using the pipe | operator are mutually exclusive.

Copy the example to a text editor and modify as-needed before running the command in the terminal/shell.

Parameters

ALIAS[:CONFIG_NAME]

Required

The alias of the MinIO AIStor deployment for which to display the entity mappings.

Optionally append :CONFIG_NAME to use a non-default LDAP configuration. If not specified, the command uses the default LDAP configuration.

--group

Alias: -g

Optional

Returns a list of policies associated with the specified group. Repeat the flag to return a list for multiple groups.

--policy

Alias: -p

Optional

Returns a list of users and groups associated with the specified policy. Repeat the flag to return a list for multiple policies.

--user

Alias: -u

Optional

Returns a list of groups to which the user belongs and the policies associated with each group. The output includes only groups assigned to policies.

Repeat the flag to return a list for multiple users.

Examples

List entities for policies and groups

The following example lists the entities mapped to each of two policies, policy1 and policy2 and entities mapped to the projectb group on the myaistor deployment:

mc idp ldap policy entities myaistor                                                \
                            --policy policy1                                        \
                            --policy policy2                                        \
                            --group='cn=projectb,ou=groups,ou=swengg,dc=min,dc=io'

List entities using a non-default LDAP configuration

The following example lists policy entities using the LDAP configuration named myldap instead of the default configuration.

mc idp ldap policy entities myaistor:myldap

mc idp ldap policy entities

Syntax

Parameters

ALIAS[:CONFIG_NAME]

--group

--policy

--user

Examples

List entities for policies and groups

List entities using a non-default LDAP configuration

Global flags

Behavior

S3 compatibility

On this page