Export LDAP Auth Backend accessor

vault/resource_ldap_auth_backend.go

@@ -122,6 +122,12 @@ func ldapAuthBackendResource() *schema.Resource {
 					return strings.Trim(v.(string), "/")
 				},
 			},
+
+			"accessor": &schema.Schema{
+				Type:        schema.TypeString,
+				Computed:    true,
+				Description: "The accessor of the LDAP auth backend",
+			},
 		},
 	}
 }
@@ -233,7 +239,22 @@ func ldapAuthBackendUpdate(d *schema.ResourceData, meta interface{}) error {
 
 func ldapAuthBackendRead(d *schema.ResourceData, meta interface{}) error {
 	client := meta.(*api.Client)
-	path := ldapAuthBackendConfigPath(d.Id())
+
+	path := d.Id()
+	auths, err := client.Sys().ListAuth()
+	if err != nil {
+		return fmt.Errorf("error reading from Vault: %s", err)
+	}
+
+	authMount := auths[strings.Trim(path, "/")+"/"]
+	if authMount == nil {
+		return fmt.Errorf("auth mount %s not present", path)
+	}
+
+	d.Set("description", authMount.Description)
+	d.Set("accessor", authMount.Accessor)
+
+	path = ldapAuthBackendConfigPath(path)
 
 	log.Printf("[DEBUG] Reading LDAP auth backend config %q", path)
 	resp, err := client.Logical().Read(path)

vault/resource_ldap_auth_backend_test.go

@@ -79,6 +79,10 @@ func testLDAPAuthBackendCheck_attrs(path string) resource.TestCheckFunc {
 			return fmt.Errorf("incorrect mount type: %s", authMount.Type)
 		}
 
+		if instanceState.Attributes["accessor"] != authMount.Accessor {
+			return fmt.Errorf("accessor in state %s does not match accessor returned from vault %s", instanceState.Attributes["accessor"], authMount.Accessor)
+		}
+
 		configPath := "auth/" + endpoint + "/config"
 
 		resp, err := client.Logical().Read(configPath)
@@ -188,6 +192,7 @@ resource "vault_ldap_auth_backend" "test" {
     bindpass               = "supersecurepassword"
     discoverdn             = false
     deny_null_bind         = true
+    description            = "example"
 }
 `, path)
 

website/docs/r/ldap_auth_backend.html.md

@@ -74,6 +74,8 @@ credentials back from the API, Terraform cannot detect and correct drift
 on `bindpass`. Changing the values, however, _will_ overwrite the
 previously stored values.
 
-## Attribute Reference
+## Attributes Reference
 
-No additional attributes are exposed by this resource.
+In addition to the fields above, the following attributes are exported:
+
+* `accessor` - The accessor for this auth mount.