LDAP 리소스 관리

Private Cloud용 Edge v. 4.16.09

인증 또는 DN 쿼리에 LDAP 정책 (http://apigee.com/docs/api-services/content/ldap-policy)을 사용하는 경우 정책이 LDAP에 대한 연결 세부정보가 포함된 Apigee 측 LDAP 리소스를 사용합니다. 제공업체 이 섹션에서는 API를 통해 LDAP 리소스를 만들고 관리하는 방법을 설명합니다.

LDAP 리소스 만들기

다음은 LDAP 리소스를 만들기 위한 API입니다.

/v1/organizations/{org_name}/environments/{environment}/ldapresources

다음은 LDAP 리소스 구성을 설명하는 주석이 달린 XML 페이로드입니다. 리소스를 만들기 위해 전송합니다.

<LdapResource name="l>dap<1"
  >Conne<ction>
    Hos<ts 
      Host >port=&q<uot;6>3<6"foo.com/Host !-- port is optional: defaults to 389 for ldap:// and> 636 <for ld>aps:/</ --
    />Hosts<
    SSLEna>b<ledfalse/SSLEnabled !-- optional, >defau<lts to >f<alse --
> <   Version3/Version !-- optio>nal, <defaults to 3->-
    <Authentications>i<mple/Authentication !-- optional, only> simp<le supported --
  >  ConnectionPr<oviderjndi|unboundi>d</ConnectionProv>ider <!-- required >--
    ServerSetTypesingle|<round robin|fa>i<lover/ServerSetType !-- not ap>plica<ble for jndi --
  >  LdapConnectorClasscom.cu<stom.ldap.MyProvide>r</LdapConnectorClass !-- If using a custom LDAP provider, the full>y q<ualified cl>ass< --
  /Connection
  Connec>t<Pool enabled="true" !-- enabled is> opti<onal, d>efaul<ts to tr>u<e --
    Timeout30000/Timeout !-- optional, in milliseco>nds; <if not >se<t, no ti>m<eout --
    Maxsize50/Maxsize !-- optional; if >not s<et, no m>ax< connecti>o<ns --
    Prefsize30/Prefsize !-- optiona>l; if< not set><, no pref> <size --
    Initsize/Initsize !-- optional>; if <not set,>< defaults> <to 1 --
    Protocol/Protocol !-- optional; if not s>et,< defaults to> &#<39;ss>l pla<in>' --
  /ConnectPool
 < Ad>min
 <   DNcn=>admin,<dc=apigee>,dc<=com/D>N<
    Password>secret/Password
  /Admin
/LdapResource

예

다음 예에서는 ldap1이라는 LDAP 리소스를 만듭니다.

curl -X POST -H "Content-Type: application/xml" \
https://api.enterprise.apigee.com/v1/organizations/myorg/environments/test/ldapresources \
-u {apigee_email}:{passwo<rd} -d \
'LdapResourc>e n<ame=">ldap1<">;
  Conn<ecti>on
    <Hosts> 
   <   Hos>tfoo.<com/Host
 >   /H<osts
    SS>LEnab<ledfals>e</SSLEnab>led
  <  Version3/Ver>sion 
<    Authenticat>ionsim<ple/Authentication> 
    Con<nectionProviderunbo>undid</ConnectionPr>ovider
    <ServerSetTyper>oun<d robin/Ser>ver<SetType
  /Connection
  Co>nnectP<ool ena>bled=<"tr>ue&quo<t; 
   > T<imeout30>000/Ti<meout 
 >  < Maxsize5>0/Maxs<ize 
   >< Prefsize>30/Pre<fsize 
 ><   Initsi>ze/I<nitsize 
   > Pr<otoco>l/Pro<to>col 
  /ConnectPool
  Adm<in<>/span>
    D<Ncn=admi>n,dc=a<pigee,dc=>com</DN
  > < Passwordsecr>et/Password
  /Admin
/LdapResource'

모든 LDAP 리소스 나열

curl https://api.enterprise.apigee.com/v1/organizations/myorg/environments/test/ldapresources \
-u {apigee_email}:{password}

LDAP 리소스 세부정보 가져오기

curl https://api.enterprise.apigee.com/v1/organizations/myorg/environments/test/ldapresources/ldap1 \
-u {apigee_email}:{password}

LDAP 리소스 업데이트

curl -X POST -H "Content-Type: application/xml" \
https://api.enterprise.apigee.com/v1/organizations/myorg/environments/test/ldapresources/ldap1 \
-u {apigee_email}:{passwo<rd} -d \
'LdapResourc>e n<ame=">ldap1<">;
  Conn<ecti>on
    <Hosts> 
   <   Hos>tfoo.<com/Host
 >   /H<osts
    SS>LEnab<ledfals>e</SSLEnab>led
  <  Version3/Ver>sion 
<    Authenticat>ionsim<ple/Authentication> 
    Con<nectionProviderunbo>undid</ConnectionPr>ovider
    <ServerSetTyper>oun<d robin/Ser>ver<SetType
  /Connection
  Co>nnectP<ool ena>bled=<"tr>ue&quo<t; 
   > T<imeout50>000/Ti<meout 
 >  < Maxsize5>0/Maxs<ize 
   >< Prefsize>30/Pre<fsize 
 ><   Initsi>ze/I<nitsize 
   > Pr<otoco>l/Pro<to>col 
  /ConnectPool
  Adm<in<>/span>
    D<Ncn=admi>n,dc=a<pigee,dc=>com</DN
  > < Passwordsecr>et/Password
  /Admin
/LdapResource'

LDAP 리소스 삭제

curl -X DELETE \
https://api.enterprise.apigee.com/v1/organizations/myorg/environments/test/ldapresources/ldap1 \
-u {apigee_email}:{password}