Go to file
Aditya Manthramurthy a0456ce940 LDAP STS API (#8091)
Add LDAP based users-groups system

This change adds support to integrate an LDAP server for user
authentication. This works via a custom STS API for LDAP. Each user
accessing the MinIO who can be authenticated via LDAP receives
temporary credentials to access the MinIO server.

LDAP is enabled only over TLS.

User groups are also supported via LDAP. The administrator may
configure an LDAP search query to find the group attribute of a user -
this may correspond to any attribute in the LDAP tree (that the user
has access to view). One or more groups may be returned by such a
query.

A group is mapped to an IAM policy in the usual way, and the server
enforces a policy corresponding to all the groups and the user's own
mapped policy.

When LDAP is configured, the internal MinIO users system is disabled.
2019-09-10 04:42:29 +05:30
.github Simplify PR template to ease new contributors' workflow (#7844) 2019-06-27 15:47:46 -07:00
browser Fix broken link to go install docs (#8090) 2019-08-15 16:00:50 -07:00
buildscripts Migrate to go1.13 to avail all new features (#8203) 2019-09-08 16:44:15 -07:00
cmd LDAP STS API (#8091) 2019-09-10 04:42:29 +05:30
dockerscripts Remove healthcheck script for Docker image (#8095) 2019-08-17 12:44:04 -07:00
docs LDAP STS API (#8091) 2019-09-10 04:42:29 +05:30
mint Migrate to go1.13 to avail all new features (#8203) 2019-09-08 16:44:15 -07:00
pkg Avoid using fastjson parser pool, move back to jsoniter (#8190) 2019-09-06 04:21:27 +05:30
.gitignore Remove healthcheck script for Docker image (#8095) 2019-08-17 12:44:04 -07:00
.jshintrc browser: Listing should append instead of replacing previous listing (#4188) 2017-04-28 09:30:26 -07:00
.mailmap Replace Minio refs in docs with MinIO and links (#7494) 2019-04-09 11:39:42 -07:00
.mention-bot Add mention-bot config 2016-05-20 13:53:15 -07:00
.travis.yml Migrate to go1.13 to avail all new features (#8203) 2019-09-08 16:44:15 -07:00
CONTRIBUTING.md doc: use make instead of go command to test changes (#7951) 2019-07-19 14:40:39 +01:00
Dockerfile Migrate to go1.13 to avail all new features (#8203) 2019-09-08 16:44:15 -07:00
Dockerfile.dev Remove healthcheck script for Docker image (#8095) 2019-08-17 12:44:04 -07:00
Dockerfile.mint Fix mint hub.docker.com builds (#7908) 2019-07-11 11:45:57 -07:00
Dockerfile.release Migrate to go1.13 to avail all new features (#8203) 2019-09-08 16:44:15 -07:00
Dockerfile.simpleci Migrate to go1.13 to avail all new features (#8203) 2019-09-08 16:44:15 -07:00
go.mod LDAP STS API (#8091) 2019-09-10 04:42:29 +05:30
go.sum LDAP STS API (#8091) 2019-09-10 04:42:29 +05:30
hound.yml browser: Listing should append instead of replacing previous listing (#4188) 2017-04-28 09:30:26 -07:00
LICENSE Initial commit 2014-10-30 21:51:52 -07:00
main.go Migrate to go1.13 to avail all new features (#8203) 2019-09-08 16:44:15 -07:00
MAINTAINERS.md Fix typo (#5960) 2018-05-22 08:09:30 +05:30
Makefile Migrate to go1.13 to avail all new features (#8203) 2019-09-08 16:44:15 -07:00
minio.spec Replace Minio refs in docs with MinIO and links (#7494) 2019-04-09 11:39:42 -07:00
NOTICE Replace Minio refs in docs with MinIO and links (#7494) 2019-04-09 11:39:42 -07:00
README.md Migrate to go1.13 to avail all new features (#8203) 2019-09-08 16:44:15 -07:00
README_zh_CN.md Fix broken link to go install docs (#8090) 2019-08-15 16:00:50 -07:00
SECURITY.md Create SECURITY.md (#7692) 2019-06-06 16:56:43 -07:00
staticcheck.conf Migrate to go1.13 to avail all new features (#8203) 2019-09-08 16:44:15 -07:00

MinIO Quickstart Guide

Slack Go Report Card Docker Pulls

MinIO is an object storage server released under Apache License v2.0. It is compatible[1] with Amazon S3 cloud storage service. It is best suited for storing unstructured data such as photos, videos, log files, backups and container / VM images. Size of an object can range from a few KBs to a maximum of 5TB.

MinIO server is light enough to be bundled with the application stack, similar to NodeJS, Redis and MySQL.

[1]: MinIO in its default mode is faster and does not calculate MD5Sum unless passed by client. This may lead to incompatibility with few S3 clients like s3ql that heavily depend on MD5Sum. For full compatibility with Amazon S3 API, start MinIO with --compat option.

minio --compat server /data

Docker Container

Stable

docker pull minio/minio
docker run -p 9000:9000 minio/minio server /data

Edge

docker pull minio/minio:edge
docker run -p 9000:9000 minio/minio:edge server /data

Note: Docker will not display the autogenerated keys unless you start the container with the -it(interactive TTY) argument. Generally, it is not recommended to use autogenerated keys with containers. Please visit MinIO Docker quickstart guide for more information here

macOS

Homebrew

Install minio packages using Homebrew

brew install minio/stable/minio
minio server /data

NOTE: If you previously installed minio using brew install minio then it is recommended that you reinstall minio from minio/stable/minio official repo instead.

brew uninstall minio
brew install minio/stable/minio

Binary Download

Platform Architecture URL
Apple macOS 64-bit Intel https://dl.min.io/server/minio/release/darwin-amd64/minio
chmod 755 minio
./minio server /data

GNU/Linux

Binary Download

Platform Architecture URL
GNU/Linux 64-bit Intel https://dl.min.io/server/minio/release/linux-amd64/minio
wget https://dl.min.io/server/minio/release/linux-amd64/minio
chmod +x minio
./minio server /data
Platform Architecture URL
GNU/Linux ppc64le https://dl.min.io/server/minio/release/linux-ppc64le/minio
wget https://dl.min.io/server/minio/release/linux-ppc64le/minio
chmod +x minio
./minio server /data

Microsoft Windows

Binary Download

Platform Architecture URL
Microsoft Windows 64-bit https://dl.min.io/server/minio/release/windows-amd64/minio.exe
minio.exe server D:\Photos

FreeBSD

Port

Install minio packages using pkg

pkg install minio
sysrc minio_enable=yes
sysrc minio_disks=/home/user/Photos
service minio start

Install from Source

Source installation is only intended for developers and advanced users. If you do not have a working Golang environment, please follow How to install Golang. Minimum version required is go1.12

GO111MODULE=on go get github.com/minio/minio

Allow port access for Firewalls

By default MinIO uses the port 9000 to listen for incoming connections. If your platform blocks the port by default, you may need to enable access to the port.

iptables

For hosts with iptables enabled (RHEL, CentOS, etc), you can use iptables command to enable all traffic coming to specific ports. Use below command to allow access to port 9000

iptables -A INPUT -p tcp --dport 9000 -j ACCEPT
service iptables restart

Below command enables all incoming traffic to ports ranging from 9000 to 9010.

iptables -A INPUT -p tcp --dport 9000:9010 -j ACCEPT
service iptables restart

ufw

For hosts with ufw enabled (Debian based distros), you can use ufw command to allow traffic to specific ports. Use below command to allow access to port 9000

ufw allow 9000

Below command enables all incoming traffic to ports ranging from 9000 to 9010.

ufw allow 9000:9010/tcp

firewall-cmd

For hosts with firewall-cmd enabled (CentOS), you can use firewall-cmd command to allow traffic to specific ports. Use below commands to allow access to port 9000

firewall-cmd --get-active-zones

This command gets the active zone(s). Now, apply port rules to the relevant zones returned above. For example if the zone is public, use

firewall-cmd --zone=public --add-port=9000/tcp --permanent

Note that permanent makes sure the rules are persistent across firewall start, restart or reload. Finally reload the firewall for changes to take effect.

firewall-cmd --reload

Test using MinIO Browser

MinIO Server comes with an embedded web based object browser. Point your web browser to http://127.0.0.1:9000 ensure your server has started successfully.

Screenshot

Test using MinIO Client mc

mc provides a modern alternative to UNIX commands like ls, cat, cp, mirror, diff etc. It supports filesystems and Amazon S3 compatible cloud storage services. Follow the MinIO Client Quickstart Guide for further instructions.

Pre-existing data

When deployed on a single drive, MinIO server lets clients access any pre-existing data in the data directory. For example, if MinIO is started with the command minio server /mnt/data, any pre-existing data in the /mnt/data directory would be accessible to the clients.

The above statement is also valid for all gateway backends.

Explore Further

Contribute to MinIO Project

Please follow MinIO Contributor's Guide

License

FOSSA Status