Skip to content
In correlation with the end of life (EOL) date for MSR 4.0.x, Mirantis stopped maintaining this documentation version as of July 17, 2026. The latest MSR product documentation is available here.

LDAP Authentication#

Prerequisites#

  • Ensure you have access to your organization's LDAP server.
  • Obtain the LDAP Base DN, Bind DN, Bind Password, and server URL.

Configure LDAP in MSR#

  1. Access MSR Administration Interface:

    • Log in as an administrator and navigate to
      Administration → Configuration.

  2. Set Auth Mode to LDAP:

    • Under the Authentication tab, select LDAP from the
      Auth Mode dropdown.

  3. Provide LDAP Server Details:

    • Auth Mode: LDAP
    • LDAP URL: Enter the server URL (for example,
      ldap://example.com or ldaps://example.com for secure connections).
    • LDAP Search DN and LDAP Search Password: Used when a user logs in to Harbor with their LDAP credentials.
      Example: cn=admin,dc=example.com
    • LDAP Base DN: The subtree under which Harbor searches for users.
      Example: dc=example.com
    • LDAP Filter: Filter used to locate LDAP/AD users.
      Example: objectclass=user
    • LDAP UID: Attribute used to match a user (for example, uid or cn).
    • LDAP Scope: Choose one of Subtree, Base, or OneLevel.
    • LDAP Verify Cert: Uncheck this if using a self-signed or untrusted certificate.

  4. Test LDAP Connection:

    • Use the Test LDAP Server button to validate the connection.
      Troubleshoot any issues before proceeding.

  5. Save Configuration:

    • Click Save to apply changes.

Manage LDAP users in MSR#

  • After LDAP is configured, MSR automatically authenticates users based on their LDAP credentials.
  • To assign user roles, go to Projects and assign LDAP-based users to project roles.