Register an authentication source

Cloudbreak allows you to register an existing LDAP/AD instance and use it for multiple clusters. You must create the LDAP/AD prior to registering it with Cloudbreak.

Once you have it ready, you can:

1. Register an existing LDAP in Cloudbreak web UI or CLI.
2. Use it as an authentication source for your clusters. Once registered, the LDAP will now show up in the list of available authentication sources when creating a cluster under advanced External Sources > Configure Authentication.

Steps

1. From the navigation pane, select External Sources > Authentication Configurations.
2. Select Register Authentication Source.
3. Provide the following parameters related to your existing LDAP/AD:

   GENERAL CONFIGURATION

   Parameter	Description	Example
   Name	Enter a name for your LDAP.	cb-ldap
   Directory Type	Choose whether your directory is LDAP or Active Directory.	LDAP
   LDAP Server Connection	Select LDAP or LDAPS.	LDAP
   Server Host	Enter the hostname or IP address for the LDAP or AD server.	10.0.3.128
   Server Port	Enter the LDAP server port.	389
   LDAP Domain	(Optional) Enter your LDAP domain if applicable.	ad.mytestldap.com
   LDAP Bind DN	Enter the LDAP Bind DN.	CN=Administrator,CN=Users,DC=ad,DC=hdc,DC=com
   LDAP Bind Password	Enter the LDAP Bind DN password.	MyPassword1234!

   USER CONFIGURATION

   Parameter	Description	Example
   LDAP User Search Base	Enter your LDAP user search base. This defines the location in the directory from which the LDAP search begins.	CN=Users,DC=ad,DC=hdc,DC=com
   LDAP User Name Attribute	Enter the attribute for which to conduct a search on the user base.	HDCaccountName
   LDAP User Dn Pattern	Enter LDAP User DN Pattern, which is used to bind an LDAP user.	CN={0},CN=Users,DC=ad,DC=hdc,DC=com
   LDAP User Object Class	Enter the directory object class filter for users.	person

   GROUP CONFIGURATION

   Parameter	Description	Example
   LDAP Group Search Base	Enter your LDAP group search base. This defines the location in the directory from which the LDAP search begins.	CN=Users,DC=ad,DC=hdc,DC=com
   LDAP Admin Group	(Optional) Enter your LDAP admin group if applicable.	hdc
   LDAP Group Name Attribute	Enter the attribute for which to conduct a search on groups.	cn
   LDAP Group Object Class	Enter the directory object class filter for groups.	group
   LDAP Group Member Attribute	Enter the attribute on the group object class that represents members.	member

4. Click Test Connection to verify that the connection information that you entered is correct.

   	Note
   	The Test Connection option: Does not work when an external authentication source uses LDAPS with a self-signed certificate. Might not work if Cloudbreak instance cannot reach the LDAP server instance. In these cases, ignore the error and proceed with cluster installation.

5. Click REGISTER.
6. The LDAP will now show up on the list of available authentication sources when creating a cluster under advanced External Sources > Configure Authentication. It can be reused with multiple clusters. Just select it if you would like to use it for a given cluster: