Kimai2: Add Ldap support

[anmol26s]

Hi
It would be nice to have Ldap support for the app.

[kevinpapst]

Someone could try to configure security to authenticate against LDAP: https://symfony.com/doc/current/security/ldap.html

composer require symfony/ldap

When using this authentication method I believe its enough to create users with the same name in Kimai. Advanced functionality would be to create new users on the fly, I believe there is no built-in functionality for this in symfony/ldap.

[marquesmatheus]

I

Hi
It would be nice to have Ldap support for the app.

Sure it will be perfect!.

[DERanselmus]

Has anyone made progress on this issue?

I've added to config/services.yaml

 Symfony\Component\Ldap\Ldap:
        arguments: ['@Symfony\Component\Ldap\Adapter\ExtLdap\Adapter']
    Symfony\Component\Ldap\Adapter\ExtLdap\Adapter:
        arguments:
                 host: 'ldap.xxxxxxx.de'
                 port: 636
                 encryption: tls
                 options:
                     protocol_version: 3
                     referrals: false

and to config/packages/security.yaml

    providers:
        fos_userbundle:
            id: fos_user.user_provider.username_email
        ldap_users:
            ldap:
                service: Symfony\Component\Ldap\Ldap
                base_dn: 'dc=aoag,dc=local'
                default_roles: 'Users'
                uid_key: 'uid'
                filter: '(&({uid_key}={uid})(objectclass=person))'
        chain_provider:
            chain:
                providers: [fos_userbundle,ldap_users]

But I can't even see a request go out to the ldap server.

I am not familiar with Symfony. Do I have to rebuilt the application upon changing yaml files?
Is there a way to log or debug this request? var/log/prod.log does not show anything, nor stdout or apache log.

[kevinpapst]

You need to bin/console cache:clear if you are in prod env (check APP_ENV .env file), otherwise changes won't be picked up.
Logging can be configured here for prod.

Even if that works, we still need a bridge that connects a Kimai user to an LDAP user. But its great that you try to work on it! We can collaborate to find a solution.

[ExaMuff]

Is there any kind of progression on this?

[kevinpapst]

Sorry to everyone for the long time waiting... but I am finally working on the most requested Kimai feature: LDAP support.
Would be great if some of you could help testing and leaving input/ideas in #815.

[kevinpapst]

Last call to the 15 people who voted for this feature for a test before I will merge it. Thanks!

[kevinpapst]

Feature now available in master.

[lock[bot]]

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs. If you use Kimai on a daily basis, please consider donating to support further development of Kimai.