airflow-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "ASF subversion and git services (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (AIRFLOW-40) Extending LDAP multitenancy to filter DAGs over LDAP groups
Date Tue, 28 Jun 2016 19:12:57 GMT

    [ https://issues.apache.org/jira/browse/AIRFLOW-40?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15353552#comment-15353552
] 

ASF subversion and git services commented on AIRFLOW-40:
--------------------------------------------------------

Commit d6d3f53673ba3736d7a858531823933cfef2bb4e in incubator-airflow's branch refs/heads/master
from [~dlejeune]
[ https://git-wip-us.apache.org/repos/asf?p=incubator-airflow.git;h=d6d3f53 ]

[AIRFLOW-40] Add LDAP group filtering feature.

It is now possible to filter over LDAP group (in the web
interface) when using the LDAP authentication backend.
Note that this feature requires the "memberOf"
overlay to be configured on the LDAP server.

Closes #1479 from dsjl/AIRFLOW-40


> Extending LDAP multitenancy to filter DAGs over LDAP groups
> -----------------------------------------------------------
>
>                 Key: AIRFLOW-40
>                 URL: https://issues.apache.org/jira/browse/AIRFLOW-40
>             Project: Apache Airflow
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: Airflow 2.0
>            Reporter: Damien Lejeune
>            Priority: Minor
>   Original Estimate: 24h
>  Remaining Estimate: 24h
>
> Currently multitenancy works with Airflow by filtering the DAGs over the specified owner.
In the context of a LDAP authentication, the filtering is done over the user name. It would
be interesting to filter DAGs over LDAP groups a user belongs to instead. This would allow
teams to develop and monitor their pipelines without having to share common credentials. 



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message