Gitea: Support for LDAP and AD Group sync

[mbuchner]

Description

Add support for LDAP and Active Directory Groups:

see: https://github.com/gogits/gogs/issues/662#issuecomment-227384886

Other good example is the Jenkins LDAP plugin:
https://wiki.jenkins-ci.org/display/JENKINS/LDAP+Plugin

[tboerger]

I'm missing exactly this feature now. Difficult to add users to orgs or groups if they have not been signed in at any time

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs during the next 2 weeks. Thank you for your contributions.

[divansantana]

https://github.com/tws-inc/gitea-group-sync exists.

Would be nice if it was merged upstream.

[pbodnar]

@divansantana, yes, the gitea-group-sync looks like a promising and logical approach until something better gets implemented. I. e. a cron job needs to be setup that does the following:

1. Iterate over existing Organizations and Teams.
2. For every Team, lookup matching Users via a LDAP query.
3. Add / remove corresponding Users in the Team.

For steps 1 and 3, Gitea API (RESTful services) can be used. Not sure if direct access Gitea database would be safe as well. Anyway, for bigger structures the queries to LDAP could be possibly optimized...

Any more ideas?

[Elias481]

We are also wanting this feature.
Optimally there would be a field on a team to link it to an explicit ldap group or userfilter.

Otherwise the gitea-group-sync is a quite usefull approach and would be sufficent for at least something. It should include a separate placeholder for organisation and team-name then at least.
And possibly consolidate the list of resulting queries first because I think it wil be quite common to have some same teams in different organisations.

[pgollor]

We are also wanting this feature.

[eummitu]

We also want this feature

[n-st]

To express interest, please use the "+1" reaction feature on the first post (as several users have done already). Comments should be preferred for on-topic suggestions and discussions, to avoid unnecessary clutter and notifications for everyone subscribed to this issue.

[husnusenturk]

This feaute will be very usefull.

[EmrahKK]

+1

[zeripath]

There is: https://github.com/tws-inc/gitea-group-sync

[pgollor]

I know this project but it didd't work very well for my gitea server and a native integration in gitea itself would be better.

[zeripath]

OK - suggest a workable UI and how it could work then it could potentially be implemented.