gitlab 11.2.3 通过LDAP 调用FreeIPA 登录

FreeIPA 和 Gitlab 的搭建，可以参考我之前的博客。

FreeIPA域名 server.zhuxu.co（内部测试，修改一下gitlab的host文件 ip FreeIPA域名 ）

vim
/etc/gitlab/gitlab.rb

gitlab_rails['ldap_enabled'] = true
gitlab_rails['ldap_servers'] = YAML.load <<-'EOS'
main: # 'main' is the GitLab 'provider ID' of this LDAP server
label: 'LDAP'
host: '192.168.100.23'
port: 389
uid: 'uid'
bind_dn: 'uid=admin,cn=users,cn=accounts,dc=zhuxu,dc=co'
password: '123456'
encryption: 'plain' # "start_tls" or "simple_tls" or "plain"
verify_certificates: true
active_directory: true
allow_username_or_email_login: true
lowercase_usernames: false
block_auto_created_users: false
base: 'dc=zhuxu,dc=co'
user_filter: ''
attributes:
username: ['uid', 'userid', 'sAMAccountName']
email:
['mail', 'email', 'userPrincipalName']
name:
'cn'
first_name: 'givenName'
last_name:
'sn'
admin_group: 'cn=admins'
sync_ssh_keys: true
EOS

gitlab-ctl reconfigure
gitlab-ctl restart