Configuring LDAP Authentication for Terraform Enterprise

Automated installation of Terraform Enterprise with LDAP authentication requires configuring two files:
 

1. Replicated Config: /etc/replicated.conf where you can set "DaemonAuthenticationType": "ldap"
 
Config example:
 

{
"DaemonAuthenticationType": "ldap",
"ImportSettingsFrom": "/etc/ptfe-settings.conf",
"LicenseFileLocation": "/tmp/license.rli",
"LogLevel": "debug",
"ReleaseSequence": 123,
"TlsBootstrapType": "server-path",
"TlsBootstrapHostname": "server.company.com",
"TlsBootstrapCert": "/etc/server.crt",
"TlsBootstrapKey": "/etc/server.key"
}

 
 
2. Terraform Enterprise config /etc/ptfe-settings.json  which is imported during the installation process
 
Here you can set LDAP parameters:
 

"ldap_hostname": {
      "value": ""
  },

  "ldap_port": {
      "value": ""
  },

  "label_encryption_label": {
      "value": ""
  },

  "ldap_encryption": {
      "value": ""
  },

  "ldap_search_user": {
      "value": ""
  },
  "ldap_search_password": {
      "value": ""
  },
  "ldap_schema": {
      "value": ""
  },
  "ldap_base_dn": {
      "value": ""
  },
  "ldap_usersearch_dn": {
      "value": ""
  },
  "ldap_advanced_search": {
      "value": ""
  },
  "ldap_restricted_user_group": {
      "value": ""
  },
  "ldap_user_query": {
      "value": ""
  },
  "ldap_restricted_group_query": {
      "value": ""
  },
  "ldap_username_field": {
      "value": ""
  },
  "ldap_login_username": {
      "value": ""
  },
  "ldap_login_password": {
      "value": ""
  }

 
The Terraform Enterprise installer reads /etc/replicated.conf and then imports settings from the file specified in the parameter "ImportSettingsFrom": "/etc/ptfe-settings.conf"
 
To retrieve LDAP settings from your existing Terraform Enterprise instance, use the following command: replicatedctl app-config export --hidden

For additional reference you can check our upstream vendor for replicated:  https://help.replicated.com/docs/native/customer-installations/automating/