LDAP Add

LDAP Add
Certified
Add LDIF entries to LDAP

Reads LDIF records from one or more URIs and issues LDAP add requests for each entry. Operations are independent (non-transactional) and rely on server ACLs; failures on a given entry are logged and processing continues.

yaml
type: io.kestra.plugin.ldap.Add

Examples

Insert entries in LDAP server.

yaml
id: ldap_add
namespace: company.team

tasks:
  - id: add
    type: io.kestra.plugin.ldap.Add
    description: What your task is supposed to do and why.
    userDn: cn=admin,dc=orga,dc=en
    password: "{{ secret('LDAP_PASSWORD') }}"
    inputs:
       - "{{outputs.someTask.uri_of_ldif_formated_file}}"
    hostname: 0.0.0.0
    port: 18060

Properties

hostname *string

Hostname

Hostname for connection.

inputs *array

SubTypestring

LDIF input URIs

One or more URIs to LDIF files in internal storage; every entry is attempted separately and errors are logged without stopping the task.

password *string

Password

User password for connection.

port *integerstring

Port

A whole number describing the port for connection.

userDn *string

User

Username for connection.

authMethod string

Defaultsimple

Possible Values

simplegssapi

Authentication method

Authentication method to use with the LDAP server.

kdc string

Kerberos key distribution center

Needed for GSSAPI authentication method. If this is not provided, an attempt will be made to determine the appropriate value from the system configuration.

pluginDefaultsRef string

Reference (ref) of the pluginDefaults to apply to this task.

realm string

Realm

Needed for GSSAPI authentication method. If this is not provided, an attempt will be made to determine the appropriate value from the system configuration.

saslAllowedQoP array

SubTypestring

Default["AUTH_CONF","AUTH_INT","AUTH"]

Possible Values

AUTHAUTH_INTAUTH_CONF

saslAllowedQoP

Used for GSSAPI authentication method only. The list of allowed qualities of protection that may be used for communication after authentication has completed, ordered from most preferred to least preferred.

By default, the full list is allowed, sorted from the most secure to the least secure: - AUTH_CONF # This ensures that third-party observers will not be able to decipher communication between the client and server (i.e., that the communication will be encrypted). - AUTH_INT # This ensure that the communication cannot be altered in an undetectable manner. - AUTH # Only authentication is to be performed, with no integrity or confidentiality protection for subsequent communication.

sslOptions

SSL Configuration

Configure SSL/LDAPS connection parameters.

Definitions

io.kestra.core.http.client.configurations.SslOptions

insecureTrustAllCertificatesbooleanstring

Whether to disable checking of the remote SSL certificate.

Only applies if no trust store is configured. Note: This makes the SSL connection insecure and should only be used for testing. If you are using a self-signed certificate, set up a trust store instead.

Metrics

additions.done counter

The total number of successful additions to the LDAP server.

additions.mean.time timer

The mean duration of LDAP additions in milliseconds.

additions.requested counter

The total number of LDIF addition requests made.