How to integrate LDAP when installing in puppet

[Linards L]

Original thread is there: http://stackoverflow.com/questions/30831557/authorize-user-by-retrieving-credentials-from-ldap-and-passing-into-oauth-1-0a-u

In other words, I need to be able to change server.xml to enable LDAP authroization. Editing would be done using puppet.

Hope it explains my need.

Also, Stash config files that has 'Corporate LDAP' enabled are also welcome - I will try to reverse-code them. 

[Linards L · Accepted solution]

Ok, then there is another option - Someone willing to share Stash configuration, that has this 'Corporate LDAP' enabled, so I can extract settings and try to hack them into the config w/o actually using REST APIs...

If file contains specific ip addresses, you can delete them. 

[rrudnicki]

Hi Linards, 

I not sure if what do you want is possible (or easier) to do. Well, let’s split this a little:

About passing the LDAP Password, maybe you could do this using a rest command but I’ve never tried this. However, take a look into these links:

http://stackoverflow.com/questions/319530/restful-authentication

http://blogs.mulesoft.com/securing-rest-resources-against-ldap/

If the rest script works, than you can use the exec option from Puppet to execute this. On this links you have an example:

https://ask.puppetlabs.com/question/13844/how-to-deploy-bash-scripts-using-puppet/

Or you can use on this way:

exec { "install npm":
    command => "/usr/bin/curl http://npmjs.org/install.sh | sh",
    creates => "/some/directory/somewhere”
}

To change the server.xml file, I recommend you to use Manifests on Puppet:

https://docs.puppetlabs.com/puppet/latest/reference/modules_fundamentals.html 

Lastly, I’ve found this answer which has a similar question. I believe you might find useful information here. 

https://answers.atlassian.com/questions/13405847/creating-users-in-stash-with-ldap-authentication 

Hope this helps.

Regards, 

Renato Rudnicki

[Linards L]

Ok 

Sorry for this. So - idea is simple - I have puppet code, I get auth data from LDAP, but I cannot find command ( from REST API ) to actually change / enable LDAP authrozation directly by editing server.xml ( which, again, I suppose, keeps configuration of the feature 'Corporate LDAP for Authorization Only' ). Could you be so kind and point me the correct way to do this REST API 'PUT' ?

[Nic Brough -Adaptavist-]

Rather than post links and expect people to read another system, please explain the problem here.  Most of us won't bother following links.