How To define LDAP/PAM Group mapping

[hadoopch]

Hi,

it is not clear how to define LDAP/PAM group mapping in definition.yml.
If it is possible the data structure has to be similar like the following example

group_mapping:
        - {group: cdp_admins, type: LDAP,  roles:  [ "ROLE_ADMIN" ] }
        - {group: cdp_users, type: LDAP, roles: [ "ROLE_USER","ROLE_OPERATOR" ] }

Who knows ?

Thanks in advance

Uli

[hadoopch]

Hi all,

i think i have got it:

cloudera_manager_external_auth:
  provider: PAM
  external_only: no
  external_first: no
  role_mappings: "{{pam_role_mappings}}"

pam_role_mappings:
        - {group: cdp_admins, type: LDAP,  roles:  [ "ROLE_ADMIN" ] }
        - {group: cdp_users, type: LDAP, roles: [ "ROLE_USER","ROLE_OPERATOR" ] }