Geek Answers Handbook

LDAP Groups and SonarQube Configuration

We plan to implement the LDAP configuration in the SonarQube settings. So the sonar.properties file is as follows

(& (object = user) (| (memberOf = CN = GL_group, OU = groups, DC = project, DC = company, DC = com)) (SamAccountName = {Login}))

Now we plan to create an Active Directory (AD) group for the entire project, and then add this to the GL_group of the AD group.

We will also add a design team to SonarQube to synchronize with AD.

My question is: will this work? i.e:.

  • Add a new project group to AD
  • Add this group to the GL_group in AD
  • User logged in to Sonar
  • User is automatically added to the project group.

Will it be added to the GL_group OR project?

LDAP Settings

sonar.security.realm: LDAP sonar.security.savePassword: false sonar.authenticator.createUsers: true ldap.url: ldap://sonar.engagement.project.country.company.com:389 ldap.bindDn: svc_user ldap.bindPassword: password ldap.authentication: simple ldap.user.baseDn: DC=engagement,DC=project,DC=country,DC=company,DC=com ldap.user.request: (&(objectClass=user)(|(memberOf=CN=GL_projectEngagementUsers,OU=projectGroups,DC=engagement,DC=project,DC=country,DC=company,DC=com))(sAMAccountName={login})) ldap.user.realNameAttribute: displayName ldap.user.emailAttribute: mail ldap.group.baseDn: DC=engagement,DC=project,DC=country,DC=company,DC=com ldap.group.idAttribute: cn ldap.group.request: (&(objectClass=group)(member={dn}))
+4
source share
1 answer

If you follow the instructions on the documentation page for the LDAP plugin , or rather, if you activate group mapping, you can achieve what you described.

+2
source

More articles:


All Articles