Gerrit and ActiveDirectory

We’ve recently started testing out Gerrit at work and one of the tasks when setting it up was to integrate the authentication with ActiveDirectory.

The process was fairly straight forward. For reference here is an example AD configuration:

[ldap]

 server = ldap://dc.company.org:389

 accountBase = ou=People,dc=company,dc=org

 accountPattern = (&(objectCategory=Person)(sAMAccountName=${username}))

 accountFullName = displayName

 accountEmailAddress = mail

 groupBase = ou=Groups,ou=People,dc=company,dc=org

 groupMemberPattern = (&(objectClass=group)(member=${dn}))

 username = cn=Gerrit User,ou=People,dc=company,dc=org

 password = ********

The username/password are for the “bind” user that will be used to query the server. More information can be found on the Gerrit auth documentation page.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.