As a user I want to be able to use LDAP authentication with my airflow webserver to integrate with existing security systems.

As both airflow and superset use flask-app webservers, the LDAP implementation for superset can provide a basis for implementing the same for airflow. This issue is complete when the following have been implemented:

• set the following environment variable to prevent a default user from being created: _AIRFLOW_WWW_USER_CREATE: 'false'
  • N.B. the database initialization process will still need to create an admin user for the schema to be complete
• create webserver_config.py in the controller using the AuthenticationClassProvider specified in the airflow cluster resource
• create tests specific to LDAP usage
• relevant documentation and examples

Links

• https://www.notion.so/Airflow-with-LDAP-in-10-mins-cbcbe5690d3648f48ee7e8ca45cb755f
• https://flask-appbuilder.readthedocs.io/en/latest/security.html#authentication-ldap
• https://airflow.apache.org/docs/apache-airflow/stable/security/index.html