Skip to content

mc idp ldap policy attach

Description

The mc idp ldap policy attach command attaches one or more polices to an entity.

The following example attaches the policy userpolicy to the user bobfisher on the myminio deployment:

mc idp ldap policy attach myminio                                                  \
                          userpolicy                                               \
                          --user='uid=bobfisher,ou=people,ou=hwengg,dc=min,dc=io'

The command has the following syntax:

mc [GLOBALFLAGS] idp ldap policy attach             \
                                 POLICYNAME         \
                                 [POLICY2] ...      \
                                 ALIAS              \
                                 [--user=`USER`]    \
                                 [--group=`GROUP`]
  • Replace ALIAS with the alias of a MinIO deployment to configure for AD/LDAP integration.

  • Replace POLICYNAME with the policy to attach to the entity. You may list multiple policies to attach to the entity.

  • Use must use one of either the --user or --group flag. You may only use the flag once in the command. You cannot use both flags in the same command.

  • Brackets [] indicate optional parameters.

  • Parameters sharing a line are mutually dependent.

  • Parameters separated using the pipe | operator are mutually exclusive.

Copy the example to a text editor and modify as-needed before running the command in the terminal/shell.

Parameters

ALIAS

mc-cmd

Required

The alias of the MinIO deployment with the entity to which to attach a policy.

For example:

mc idp ldap policy attach myminio                                                  \
                          userpolicy                                               \
                          --user='uid=bobfisher,ou=people,ou=hwengg,dc=min,dc=io'

Example

The following example attaches two policies, policy1 and policy2, to the projectb group on the myminio deployment:

mc idp ldap policy attach myminio                                                 \
                          policy1                                                 \
                          policy2                                                 \
                          --group='cn=projectb,ou=groups,ou=swengg,dc=min,dc=io'

Global Flags

This command supports any of the global flags.

Behavior

S3 Compatibility

SILO is the supported server for PGSTY mcli; compatibility with upstream MinIO and other S3 services is best effort.