Authentication backends (LDAP, OAuth) in Apache Airflow - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding LDAP Authentication in Airflow

Which statement best describes how Airflow uses LDAP for authentication?

A Airflow directly queries the LDAP server to verify user credentials during login.

B Airflow stores LDAP passwords locally and compares them during login.

C Airflow uses OAuth tokens to authenticate users against LDAP.

D Airflow requires users to manually enter LDAP credentials in the configuration file.

💡 Hint

Think about how LDAP servers usually handle authentication requests.

Airflow connects to the LDAP server and sends the user's credentials to verify them directly. It does not store passwords locally or use OAuth tokens for LDAP authentication.

💻 Command Output

intermediate

OAuth Authentication Result in Airflow

What will be the output in Airflow logs when a user successfully authenticates via OAuth?

Apache Airflow

INFO - User '[e-mail]' authenticated successfully via OAuth provider.

A INFO - User '[e-mail]' authenticated successfully via OAuth provider.

B DEBUG - User '[e-mail]' password verified locally.

C WARNING - OAuth provider unreachable, fallback to LDAP.

D ERROR - OAuth token expired for user '[e-mail]'.

💡 Hint

Look for a successful authentication message mentioning OAuth.

The log line confirms a successful OAuth authentication for the user. Other options indicate errors or different authentication methods.

❓ Configuration

advanced

Configuring LDAP Authentication in Airflow

Which configuration snippet correctly enables LDAP authentication in Airflow's airflow.cfg?

A

[ldap]
uri = ldap://ldap.example.com
user_filter = (objectClass=person)
auth_backend = airflow.contrib.auth.backends.oauth_auth

B

[ldap]
uri = ldap://ldap.example.com
user_filter = (objectClass=person)
auth_backend = airflow.contrib.auth.backends.password_auth

C

[ldap]
uri = ldap://ldap.example.com
user_filter = (objectClass=person)
auth_backend = airflow.contrib.auth.backends.ldap_auth

D

[ldap]
uri = ldap://ldap.example.com
user_filter = (objectClass=person)
auth_backend = airflow.contrib.auth.backends.no_auth

💡 Hint

Check which backend is specifically for LDAP authentication.

The correct backend for LDAP authentication is ldap_auth. Other backends are for different authentication methods or no authentication.

❓ Troubleshoot

advanced

OAuth Authentication Failure in Airflow

After configuring OAuth in Airflow, users report login failures. Which log message indicates the root cause?

A INFO - User '[e-mail]' authenticated successfully via OAuth provider.

B DEBUG - Password authentication succeeded for user '[e-mail]'.

C WARNING - LDAP server not reachable, fallback failed.

D ERROR - OAuth client secret missing in configuration.

💡 Hint

Look for errors related to OAuth configuration.

Missing OAuth client secret causes authentication failures. Other messages indicate success or unrelated issues.

🔀 Workflow

expert

Order of Authentication Backends in Airflow

Given Airflow configured with both LDAP and OAuth authentication backends, what is the correct order of authentication attempts during user login?

A 1,2,4,3

B 1,4,2,3

C 1,2,3,4

D 2,1,3,4

💡 Hint

Think about short-circuiting authentication once a method succeeds.

Airflow first checks OAuth token validity (1). If valid, it grants access immediately (4). If OAuth fails, it tries LDAP (2). If LDAP fails, access is denied (3).