LDAP

This is a set of Cloud Formation Templates and scripts to spin up a simple LDAP service and its Admin panel.

It can be used to provide a simple LDAP instance to be used to integrate with any Gerrit setup in the different cookbooks.

How to run it

Prerequisites

As a prerequisite to run this stack, you will need a registered and correctly configured domain in Route53

Getting Started

• Create a key pair to access the EC2 instances in the cluster:

aws ec2 create-key-pair --key-name gerrit-cluster-keys \
  --query 'KeyMaterial' --output text > gerrit-cluster.pem

NOTE: the EC2 key pair are useful when you need to connect to the EC2 instances for troubleshooting purposes. Store them in a pem file to use when ssh-ing into your instances as follow: ssh -i yourKeyPairs.pem <ec2_instance_ip>

• Create the LDAP stack:

make ldap HOSTED_ZONE_NAME=mycompany.com

The HOSTED_ZONE_NAME value is the Hosted Zone Name where a DSN route pointing to the LDAP service will be created.

Cleaning up

make delete-ldap

Access your LDAP instance

• LDAP Service:
• URI: ldap://gerrit-ldap.gerritforgeaws.com
• Port: 636
• LDAP Admin Service:
• URI: https://gerrit-ldap.mycompany.com
• Port: 6443
• Username: cn=admin,dc=example,dc=org
• Password: secret

The LDAP instance provided already has a Gerrit Admin user baked in with the following credentials:

• Username: gerritadmin
• Password: secret