gerrit ldap配置

ldap安装地址 ：http://www.duozhi.online/2023/10/12/ldap%e5%ae%89%e8%a3%85/

ldap配置如下

修改gerrit配置

root@lili:/opt/gerrit/review_site# cat etc/gerrit.config 
[gerrit]
	basePath = git
	canonicalWebUrl = http://192.168.36.137:8802/
	serverId = 63e36444-137b-4ba4-b935-1f1f1f633d9a
[container]
	javaOptions = "-Dflogger.backend_factory=com.google.common.flogger.backend.log4j.Log4jBackendFactory#getInstance"
	javaOptions = "-Dflogger.logging_context=com.google.gerrit.server.logging.LoggingContext#getInstance"
	user = root
	javaHome = /usr/lib/jvm/java-11-openjdk-arm64
[index]
	type = lucene
[auth]
	type = LDAP
	userNameCaseInsensitive = true
        gitBasicAuth = true
        gitBasicAuthPolicy = HTTP
[receive]
	enableSignedPush = false
[sendemail]
	smtpServer = localhost
[sshd]
	listenAddress = *:29418
[httpd]
	listenUrl = http://*:8802/
[cache]
	directory = cache
[plugins]
	allowRemoteoAdmin = true
[ldap]
        server = ldap://192.168.36.138
        username = cn=admin,dc=ldap,dc=com
        accountBase = ou=dept1,dc=ldap,dc=com
        groupBase = ou=dept1,dc=ldap,dc=com
root@lili:/opt/gerrit/review_site# 


配置ldap密码
root@lili:/opt/gerrit/review_site# cat etc/secure.config 
[auth]
	registerEmailPrivateKey = 2L/dAedY+Jlc4ccAanzYMt4g7x5k/Tvh5OU=
[ldap]
      password = 123456

重启gerrit
root@lili:/opt/gerrit/review_site# ./bin/gerrit.sh restart
Stopping Gerrit Code Review: OK
Starting Gerrit Code Review: OK

使用ldap 中zhangsan用户登陆

切换回原来的登陆方式，设置zhangsan为管理员

DEVELOPMENT_BECOME_ANY_ACCOUNT

admin用户登陆

把zhangsan设置为管理员

再把auth设置为LDAP,重启，

root@lili:/opt/gerrit/review_site# sh bin/gerrit.sh restart
Stopping Gerrit Code Review: OK
Starting Gerrit Code Review: OK

登陆查看，已经是管理员了