Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


    Cloudron Forum

    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular

    Minio LDAP Integration

    Minio
    7
    16
    1481
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • infogulch
      infogulch last edited by

      Minio auth configuration seems to be rather awkward. It appears to have pretty decent support for LDAP authentication: https://github.com/minio/minio/blob/master/docs/sts/ldap.md

      Do you think it would be a good idea to enable this?

      ? 1 Reply Last reply Reply Quote 3
      • ?
        A Former User last edited by

        Agree. I am all for this. The more services I can use with LDAP, the better.

        jdaviescoates 1 Reply Last reply Reply Quote 2
        • girish
          girish Staff last edited by

          My understanding is that LDAP is only for the STS integration and not for login and minio dashboard. (STS is a token service where services can request a temporary access token from access key and secret).

          ? 1 Reply Last reply Reply Quote 0
          • girish
            girish Staff last edited by

            Digging deeper I found this issue - https://github.com/minio/minio/issues/9837 . From there, I found that there is another admin UI for minio (?) - https://github.com/minio/console which looks way better than the current one. It's unclear to me why these are separate projects and how they are tied together.

            There's some LDAP setup docs at https://github.com/minio/console/blob/master/DEVELOPMENT.md . Also this blog post - https://blog.min.io/new-minio-console/

            infogulch 1 Reply Last reply Reply Quote 3
            • infogulch
              infogulch @girish last edited by

              @girish Wow that console UI looks great. Based on the publish date of that article and the current release tag on the console (0.7.0) it seems that it's a pretty new project. As far as being separate I can imagine wanting to have a very lightweight UI for the storage device itself and running the full-featured UI separately, especially if they're targeting k8s-like deployments.

              1 Reply Last reply Reply Quote 3
              • marcusquinn
                marcusquinn last edited by

                "You’re one docker pull and three minutes of configuration away from a browser-based interface that taps into the most powerful features of the MinIO storage suite."

                Nice find! Just "three minutes" work then πŸ˜…

                We're not here for a long time - but we are here for a good time :)
                Jersey/UK
                Work & Ecommerce Advice: https://brandlight.org
                Personal & Software Tips: https://marcusquinn.com

                1 Reply Last reply Reply Quote 1
                • jdaviescoates
                  jdaviescoates @Guest last edited by

                  @atrilahiji said in Minio LDAP Integration:

                  The more services I can use with LDAP, the better.

                  Agreed.

                  (And I still really want to be able to filter the app store by LDAP support and for Discourse and NodeBB to have LDAP added πŸ˜› )

                  @girish said in Minio LDAP Integration:

                  From there, I found that there is another admin UI for minio (?) - https://github.com/minio/console which looks way better than the current one. It's unclear to me why these are separate projects and how they are tied together.
                  There's some LDAP setup docs at https://github.com/minio/console/blob/master/DEVELOPMENT.md . Also this blog post - https://blog.min.io/new-minio-console/

                  It would be awesome to have this lovely new Minio GUI available in Cloudron!

                  I use Cloudron with Gandi & Hetzner

                  1 Reply Last reply Reply Quote 0
                  • girish
                    girish Staff last edited by

                    Agreed, I think we should open up a separate app request for this minio console.

                    1 Reply Last reply Reply Quote 3
                    • girish
                      girish Staff last edited by

                      It seems the latest minio release has deprecated/removed the old object browser and merged the console project into the main app.

                      ? 1 Reply Last reply Reply Quote 2
                      • ?
                        A Former User @girish last edited by A Former User

                        @girish Huh... are you going to just update the current app or make a v2 app and keep the old one around?

                        girish 1 Reply Last reply Reply Quote 0
                        • girish
                          girish Staff @Guest last edited by

                          @atridad Hopefully, we don't need another app. It's confusing a bit because it seems the API and the UI run on different ports. Maybe they are trying to achieve some multi-domain style setup, not sure.

                          ? 1 Reply Last reply Reply Quote 0
                          • ?
                            A Former User @girish last edited by

                            @girish Ahhh I see. Only reason I figured it might be needed is if their re-write makes updating difficult.

                            1 Reply Last reply Reply Quote 0
                            • ?
                              A Former User @infogulch last edited by

                              @infogulch
                              Hi
                              we have LDAP username ,password and ldap server details and need to integrate with minio in kubernets cluster
                              Could you please guide me , where to setup in minio server and we have below data but i am not understanding ,in which location of minio server , need to setup and after setting the ldap details, where to find in minio server.

                              export MINIO_IDENTITY_LDAP_SERVER_ADDR=myldapserver.com:636
                              export MINIO_IDENTITY_LDAP_USERNAME_FORMAT="uid=%s,cn=accounts,dc=myldapserver,dc=com"
                              export MINIO_IDENTITY_LDAP_GROUP_SEARCH_BASE_DN="dc=myldapserver,dc=com"
                              export MINIO_IDENTITY_LDAP_GROUP_SEARCH_FILTER="(&(objectclass=groupOfNames)(memberUid=%s)$)"
                              export MINIO_IDENTITY_LDAP_STS_EXPIRY=60h
                              export MINIO_IDENTITY_LDAP_TLS_SKIP_VERIFY=on

                              https://github.com/minio/minio/blob/master/docs/sts/ldap.md--- could not help me much.

                              Thanks,

                              ? 1 Reply Last reply Reply Quote 0
                              • ?
                                A Former User @girish last edited by

                                This post is deleted!
                                1 Reply Last reply Reply Quote 0
                                • ?
                                  A Former User @Guest last edited by

                                  @baswaraj wrong community. Ask the minio devs.

                                  1 Reply Last reply Reply Quote 0
                                  • BrutalBirdie
                                    BrutalBirdie Staff last edited by

                                    https://docs.min.io/minio/baremetal/security/ad-ldap-external-identity-management/configure-ad-ldap-external-identity-management.html#minio-authenticate-using-ad-ldap-generic

                                    I am currently checking whats going on with LDAP and the new console.

                                    https://git.cloudron.io/cloudron/minio-app/-/merge_requests/2

                                    Like my work? Consider donating a beer 🍻 Cheers!

                                    1 Reply Last reply Reply Quote 2
                                    • First post
                                      Last post
                                    Powered by NodeBB