cyberark / cyberark-conjur-cli

CyberArk Conjur command line interface written in Python
https://www.conjur.org
Apache License 2.0
17 stars 16 forks source link

Support authn-ldap #411

Closed szh closed 2 years ago

szh commented 2 years ago

Depends on #410, https://github.com/cyberark/conjur-api-python/pull/23

Desired Outcome

The conjur init command should support LDAP authentication. It should be possible to specify the authentication type using the -t or --authn-type option. The default value should be authn (same as current), and it should additionally support ldap. When using ldap, a --service-id option should be mandatory. If the --service-id option is specified, then --authn-type should default to ldap.

The CLI implementation should be straightforward. It needs to support the new CLI arguments in the init command, and it will need to pass them to the conjur-api-python library.

Create new and update existing unit and integration tests.

Implemented Changes

Connected Issue/Story

Resolves #264, #324

CyberArk internal issue link: ONYX-20431

Definition of Done

Changelog

Test coverage

Documentation

Behavior

Security

szh commented 2 years ago

@jdumas I'd love to hear your input on this since you were the one behind #324. Does this solve your use case? Are you able to test this locally and see if it works for you?

jdumas commented 2 years ago

Sorry I'm not using Conjur much these days, so I won't be able to test this for a while :(