Support

Using LDAP authentication with RStudio Server Pro

Follow

RStudio Server connects to LDAP via PAM. If you already have LDAP set up for the server you're running RStudio Server on, you'll need to integrate it with PAM. If you've already done that with other utilities on the server, such as ssh or general logins, you may be able to copy that PAM profile to use with RStudio:

sudo cp /etc/pam.d/login /etc/pam.d/rstudio

Otherwise, you'll need to enable PAM sessions (see here) and configure the rstudio and rstudio-session PAM profiles in order to make sure they use LDAP for their authentication. This will typically require installing the pam_ldap.so plugin and calling it in the profile. Here's a very basic setup we've used in the past:

/etc/pam.d/rstudio:

auth       sufficient     pam_ldap.so
account    required       pam_ldap.so
session    requisite      pam_ldap.so

/etc/pam.d/rstudio-session:

auth        required      pam_ldap.so
account     [default=bad success=ok user_unknown=ignore] pam_ldap.so
password    sufficient    pam_ldap.so
session     requisite     pam_ldap.so

For testing, we'd recommend using the pamtester utility described in the Admin Guide here:http://docs.rstudio.com/ide/server-pro/authenticating-users.html#diagnosing-pam-authentication-problems

We'd really recommend reading through the PAM guides linked in the admin guide - LDAP and PAM are very powerful but may require quite a bit of specific configuration that we may not be able to provide.

Have more questions? Submit a request

Comments

Powered by Zendesk