Allow complex expressions in external authentication LDAP search filters

cloudera-labs / cloudera.cluster

An Ansible collection for lifecycle and management of Cloudera CDP Private Cloud resources on bare metal, IaaS, and PaaS.

Apache License 2.0

32 stars 46 forks source link

Allow complex expressions in external authentication LDAP search filters #171

Closed clevesque closed 6 months ago

clevesque commented 7 months ago

Add option for complex LDAP search filters. Older implementation assumed all ldap filters end with "={0}". This newer implementation allows the user to craft any legal filter expression, including complex compound expressions, like ((&(member={0})(objectclass=posixgroup)(!(cn=admin))). This example would handle the IPA group search filter for ECS 1.5.x