Skip to content

LDAP_parameters_PSMDB#1124

Open
rasika-chivate wants to merge 33 commits into
8.0from
LDAP_parameters_PSMDB
Open

LDAP_parameters_PSMDB#1124
rasika-chivate wants to merge 33 commits into
8.0from
LDAP_parameters_PSMDB

Conversation

@rasika-chivate
Copy link
Copy Markdown
Collaborator

@rasika-chivate rasika-chivate commented May 12, 2026

Document the LDAP parameters for PSMDB.

Copy link
Copy Markdown
Contributor

Copilot AI commented May 12, 2026

Just as a heads up, I was blocked by some firewall rules while working on your feedback. Expand below for details.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

  • https://api.github.com/repos/percona/psmdb-docs/commits
    • Triggering command: /home/REDACTED/.local/bin/mkdocs /home/REDACTED/.local/bin/mkdocs build -q (http block)

If you need me to access, download, or install something from one of these locations, you can either:

@nastena1606 nastena1606 temporarily deployed to LDAP_parameters_PSMDB - psmdb-docs-8.0 PR #1124 May 12, 2026 07:41 — with Render Destroyed
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.

Comment thread docs/ldap-parameters.md Outdated
Comment thread docs/ldap-parameters.md Outdated
Comment thread docs/authorization.md Outdated
Comment on lines +156 to +158
To configure LDAP authorization with the native LDAP authentication, see [Setting up LDAP authentication and authorization using NativeLDAP](ldap-setup.md).

*[DN]: Distinguished Name No newline at end of file
For details on available configuration options, refer to [LDAP parameters](ldap-parameters.md). No newline at end of file
Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@copilot apply changes based on this feedback

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Re-added in fa1ca22: the DN (Distinguished Name) abbreviation definition at the end of authorization.md.

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
@nastena1606 nastena1606 temporarily deployed to LDAP_parameters_PSMDB - psmdb-docs-8.0 PR #1124 May 12, 2026 07:46 — with Render Destroyed
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Agent-Logs-Url: https://github.com/percona/psmdb-docs/sessions/d369ba41-d255-42a9-b450-9246ff0c220c

Co-authored-by: rasika-chivate <95711051+rasika-chivate@users.noreply.github.com>
Comment thread docs/ldap-parameters.md Outdated
Copy link
Copy Markdown
Contributor

@radoslawszulgo radoslawszulgo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Rasika, please fix all my comments so far. And work with MongoDB upstream documentation to provide more comprhensive documentation for parameters. Especially care to what is the type of parameter (what format is expected), is it applicable to mongod and mongos or only mongod ? What's the minimum version required, what's the impact of the parameter.

reference:

Comment thread docs/ldap-parameters.md Outdated
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

userToDN

Comment thread docs/ldap-parameters.md
!!! note
Both parameters can be set at startup and at runtime using `setParameter`.

**Cache invalidation parameters**
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

shouldn't that be ## ?

Comment thread docs/ldap-parameters.md

| Parameter | Required | Description |
| ------------------------------------------------------- | -------- | ---------------------------------------------------------------------------------------------------------------------------- |
| `ldapUseConnectionPool` | No | Enables/disables connection pooling. Default is OS dependent: `true` on Windows and specific Linux builds using `libldap_r`. |
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We don't support Windows!

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please clarify what's the default on what OS if possible.

Comment thread docs/authorization.md

### Connection pool

As of version 6.0.2-1, Percona Server for MongoDB always uses a connection pool to LDAP server to process bind requests. The connection pool is enabled by default. The default connection pool size is 2 connections.
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
As of version 6.0.2-1, Percona Server for MongoDB always uses a connection pool to LDAP server to process bind requests. The connection pool is enabled by default. The default connection pool size is 2 connections.
Percona Server for MongoDB always uses a connection pool to the LDAP server to process bind requests. The connection pool is enabled by default. The default connection pool size is 2 connections.

Comment thread docs/ldap-parameters.md
ldap:
mode: authzAndAuthn
setParameter:
# --- Connection Pool Settings (Startup Only) ---
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think that comment is not needed

Comment thread docs/ldap-parameters.md


| **Parameter** | **Required** | **Description** |
| ----------------------------------- | ------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why so many "-" dashes?

Comment thread docs/ldap-parameters.md

```{.javascript data-prompt=">"}
> db.adminCommand({
... setParameter: 1,
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please remove dots "..." they are not needed and prevent copying and pasting to the shell

Comment thread docs/ldap-parameters.md
authorization: enabled
ldap:
mode: authzAndAuthn
# --- Performance & Retries ---
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

comment not needed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants