airflow集成ldap问题

airlfow集成ldap默认需要开启ssl/tls,但是配置文件中没有开关选项,如要关闭只能修改代码,只需要修改一个地方,vi /root/python3/lib/python3.6/site-packages/airflow/contrib/auth/backends/ldap_auth.py,找到ldap_auth.py这个文件中的get_ldap_connection方法
修改前

    tls_configuration = Tls(validate=ssl.CERT_REQUIRED,
                            ca_certs_file=cacert)

    server = Server(conf.get("ldap", "uri"),
                    use_ssl=True,
                    tls=tls_configuration)

修改后

 #tls_configuration = Tls(validate=ssl.CERT_REQUIRED,
    #                        ca_certs_file=cacert)

    server = Server(conf.get("ldap", "uri"),
                    use_ssl=False,
                    tls=None)

修改配置文件

[webserver]
authenticate = True
auth_backend = airflow.contrib.auth.backends.ldap_auth


[ldap]
# set this to ldaps://<your.ldap.server>:<port>
uri = ldap://ldap.ccc.com:389
user_filter = objectClass=*
user_name_attr = uid 
group_member_attr = memberUid  #默认是memberOf,如果ldap没有开启memberOf,也可以换成memberUid
superuser_filter =
data_profiler_filter =
bind_user = cn=Manager,dc=hhz,dc=com
bind_password = 密码
basedn = dc=hhz,dc=com
search_scope = SUBTREE
cacert = /etc/ca/ldap_ca.crt
#search_scope = LEVEL
# This setting allows the use of LDAP servers that either return a
# broken schema, or do not return a schema.
ignore_malformed_schema = False
发布了118 篇原创文章 · 获赞 37 · 访问量 17万+

猜你喜欢

转载自blog.csdn.net/woloqun/article/details/103905405
今日推荐