mirror of
https://github.com/minio/minio.git
synced 2024-12-26 07:05:55 -05:00
ae46ce9937
This is a change to IAM export/import functionality. For LDAP enabled setups, it performs additional validations: - for policy mappings on LDAP users and groups, it ensures that the corresponding user or group DN exists and if so uses a normalized form of these DNs for storage - for access keys (service accounts), it updates (i.e. validates existence and normalizes) the internally stored parent user DN and group DNs. This allows for a migration path for setups in which LDAP mappings have been stored in previous versions of the server, where the name of the mapping file stored on drives is not in a normalized form. An administrator needs to execute: `mc admin iam export ALIAS` followed by `mc admin iam import ALIAS /path/to/export/file` The validations are more strict and returns errors when multiple mappings are found for the same user/group DN. This is to ensure the mappings stored by the server are unambiguous and to reduce the potential for confusion. Bonus **bug fix**: IAM export of access keys (service accounts) did not export key name, description and expiration. This is fixed in this change too.
39 lines
854 B
TOML
39 lines
854 B
TOML
[files]
|
|
extend-exclude = [
|
|
".git/",
|
|
"docs/",
|
|
]
|
|
ignore-hidden = false
|
|
|
|
[default]
|
|
extend-ignore-re = [
|
|
"Patrick Collison",
|
|
"Copyright 2014 Unknwon",
|
|
"[0-9A-Za-z/+=]{64}",
|
|
"ZXJuZXQxDjAMBgNVBA-some-junk-Q4wDAYDVQQLEwVNaW5pbzEOMAwGA1UEAxMF",
|
|
"eyJmb28iOiJiYXIifQ",
|
|
"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.*",
|
|
"MIIDBTCCAe2gAwIBAgIQWHw7h.*",
|
|
'http\.Header\{"X-Amz-Server-Side-Encryptio":',
|
|
"ZoEoZdLlzVbOlT9rbhD7ZN7TLyiYXSAlB79uGEge",
|
|
]
|
|
|
|
[default.extend-words]
|
|
"encrypter" = "encrypter"
|
|
"kms" = "kms"
|
|
"requestor" = "requestor"
|
|
|
|
[default.extend-identifiers]
|
|
"HashiCorp" = "HashiCorp"
|
|
|
|
[type.go.extend-identifiers]
|
|
"bui" = "bui"
|
|
"dm2nd" = "dm2nd"
|
|
"ot" = "ot"
|
|
"ParseND" = "ParseND"
|
|
"ParseNDStream" = "ParseNDStream"
|
|
"pn" = "pn"
|
|
"TestGetPartialObjectMisAligned" = "TestGetPartialObjectMisAligned"
|
|
"thr" = "thr"
|
|
"toi" = "toi"
|