6_enable_ldap_auth.sh

. env.sh

echo
cyan "Running: $0: Enable and Configure the LDAP Auth Method"
pe "vault auth enable -path=ldap-um ldap"
pe "vault auth enable -path=ldap-mo ldap"

green "Configure Unique Member group lookups"
# Using group of unique names lookups
cat << EOF
vault write auth/ldap-um/config
    url="${LDAP_URL}"
    binddn="${BIND_DN}"
    bindpass="${BIND_PW}"
    userdn="${USER_DN}"
    userattr="${USER_ATTR}"
    groupdn="${GROUP_DN}"
    groupfilter="${UM_GROUP_FILTER}"
    groupattr="${UM_GROUP_ATTR}"
    insecure_tls=true
EOF
p

vault write auth/ldap-um/config \
    url="${LDAP_URL}" \
    binddn="${BIND_DN}" \
    bindpass="${BIND_PW}" \
    userdn="${USER_DN}" \
    userattr="${USER_ATTR}" \
    groupdn="${GROUP_DN}" \
    groupfilter="${UM_GROUP_FILTER}" \
    groupattr="${UM_GROUP_ATTR}" \
    insecure_tls=true

echo
green "Configure MemberOf group lookups"
cat << EOF
vault write auth/ldap-mo/config
    url="${LDAP_URL}"
    binddn="${BIND_DN}"
    bindpass="${BIND_PW}"
    userdn="${USER_DN}"
    userattr="${USER_ATTR}"
    groupdn="${USER_DN}"
    groupfilter="${MO_GROUP_FILTER}"
    groupattr="${MO_GROUP_ATTR}"
    insecure_tls=true
EOF
p

vault write auth/ldap-mo/config \
    url="${LDAP_URL}" \
    binddn="${BIND_DN}" \
    bindpass="${BIND_PW}" \
    userdn="${USER_DN}" \
    userattr="${USER_ATTR}" \
    groupdn="${USER_DN}" \
    groupfilter="${MO_GROUP_FILTER}" \
    groupattr="${MO_GROUP_ATTR}" \
    insecure_tls=true