Migrating from local authentication to Active Directory?

Archive Rancher 1.x
1

Is it possible to migrate from local authentication to Active Directory?

2

You can turn auth off and then re-enable it with AD, but there is nothing to update the old local account entries to tie them to AD users.

That can be done manually/in the API by going through /v1/accounts?kind=admin and /v1/accounts?kind=user, changing on each account:

  • the externalIdType to ldap_user
  • the externalId to the DN of the user, e.g. CN=Vincent,CN=Users,DC=mycompany,DC=com

(I’d take a database backup first…)

1 Like