mjeremym2 opened a new issue, #16106:
URL: https://github.com/apache/dolphinscheduler/issues/16106

   ### Search before asking
   
   - [X] I had searched in the 
[issues](https://github.com/apache/dolphinscheduler/issues?q=is%3Aissue) and 
found no similar feature requirement.
   
   
   ### Description
   
   The currently implementation will only llow one user to be ADMIN for a 
scheduler instance using the attribute
   
   security.authentication.ldap.user.admin=read-only-admin
   
   Further more the revoke/invoking must be done changing the dolphin config. 
In large organisation this will done through roles/groups.
   
   Therefore, I would like to be assign admin access using LDAP groups 
("memberOf" attribute)
   
   So can we extend the code (keeping the old way too), but also add chacke 
like "mail" attributes
   
           security.authentication.ldap.user.admin-attribute=membmerOf
           
security.authentication.ldap.user.admin-value=cn=dolphinAdmin,dc=....etc...
   
   https://github.com/apache/dolphinscheduler/pull/16105
   
   
   ### Are you willing to submit a PR?
   
   - [X] Yes I am willing to submit a PR!
   
   ### Code of Conduct
   
   - [X] I agree to follow this project's [Code of 
Conduct](https://www.apache.org/foundation/policies/conduct)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: 
[email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to