Sonar集成LDAP

一、下载并安装LDAP插件
配置--》应用市场

LDAP插件.png

二、配置LDAP
1、通过页面信息，找到sonar的安装目录。

image.png

注意：这里还支持重启、修改日志等级等操作。

2、具体的系统信息如下：（部分省略）

{"Health":"GREEN","Health Causes":[],"System":{"Server ID":"AWaB9uS5OvHY02CG0KTC","Version":"6.7.3","External User Authentication":"LDAP","High Availability":false,"Official Distribution":false,"Force authentication":false,"Home Dir":"/data/sonarqube-6.7.3","Data Dir":"/data/sonarqube-6.7.3/data","Temp Dir":"/data/sonarqube-6.7.3/temp","Processors":2},"Database":{"Database":"MySQL","Database Version":"5.6.20","Username":"sonar@192.168.10.77","URL":"jdbc:mysql://192.168.5.53:3306/sonar?useUnicode=true&characterEncoding=utf8&rewriteBatchedStatements=true&useConfigs=maxPerformance&useSSL=false","Driver":"MySQL Connector Java","Driver Version":"mysql-connector-java-5.1.42 ( Revision: 1f61b0b0270d9844b006572ba4e77f19c0f230d4 )"},"Plugins":{"python":"1.8.0.1496 [SonarPython]","l10nzh":"1.19 [Chinese Pack]","pmd":"2.6 [PMD]","scmsvn":"1.6.0.860 [SonarQube :: Plugins :: SCM :: SVN]","javascript":"3.2.0.5506 [SonarJS]","authgitlab":"1.3.2 [GitLab Auth]","csharp":"6.5.0.3766 [SonarC#]","findbugs":"3.8.0 [Findbugs]","java":"5.8.0.15699 [SonarJava]","ldap":"2.2.0.608 [LDAP]","flex":"2.3 [Flex]","scmgit":"1.3.0.869 [SonarQube :: Plugins :: SCM :: Git]","xml":"1.4.3.1027 [SonarXML]","php":"2.11.0.2485 [SonarPHP]","typescript":"1.1.0.1079 [SonarTS]","checkstyle":"4.11 [Checkstyle]","yaml":"1.0.1 [YAML Analyzer]"},"Web JVM State":{"Max Memory (MB)":455,"Free Memory (MB)":119,"Heap Committed (MB)":366,"Heap Init (MB)":128,"Heap Max (MB)":455,"Heap Used (MB)":246,"Non Heap Committed (MB)":185,"Non Heap Init (MB)":2,"Non Heap Used (MB)":173,"System Load Average":"8.0% (last minute)","Threads":51},"Web Database Connection":{"Pool Active Connections":1,"Pool Max Connections":60,"Pool Initial Size":0,"Pool Idle Connections":4,"Pool Min Idle Connections":2,"Pool Max Idle Connections":5,"Pool Max Wait (ms)":5000,"Pool Remove Abandoned":false,"Pool Remove Abandoned Timeout (seconds)":300},"Web Logging":{"Logs Level":"INFO","Logs Dir":"/data/sonarqube-6.7.3/logs"},"Web JVM Properties":{"awt.toolkit":"sun.awt.X11.XToolkit","catalina.base":"/data/sonarqube-6.7.3/temp/tc","catalina.home":"/data/sonarqube-6.7.3/temp/tc","catalina.useNaming":"false","file.encoding":"UTF-8","file.encoding.pkg":"sun.io","file.separator":"/","http.agent":"SonarQube 6.7.3 # AWaB9uS5OvHY02CG0KTC","java.awt.graphicsenv":"sun.awt.X11GraphicsEnvironment","java.awt.headless":"true","java.awt.printerjob":"sun.print.PSPrinterJob",.........

可以得出sonar的安装目录为/data/sonarqube-6.7.3/data。

3、修改/data/sonarqube-6.7.3/data/conf/sonar.properties

ldap配置.png

三、配置LDAP权限模板
类似jenkins的基于项目名的模糊匹配。
1、权限之用户

image.png

2、权限之群组

image.png

3、权限之权限模板

权限模板.png

默认的模板，不是很适用多个业务线项目的不同权限分配。

一般地，建议给不同的项目组，制定一些有规则的项目名，以及对应的权限模板。
比如 A项目组，有项目service1，service2; B 项目组，有项目service3, service4。
我们新建两个权限模板， 具体见截图：

image.png
image.png

注意，项目名需要根据上面的匹配规则，修改如下：
A项目组　　Aservice1，　Aservice2，　　Ａ模板
B项目组　　Bservice3，　Bservice4，　　Ｂ模板