Panel: LDAP Authentication

[LukeFlynn]

Hi,

I'm not sure if this is the right place to post feature suggestions, and I'm aware a lot of users of this panel might not require this feature.. but I think it would be great if you guys supported external auth mechanisms like LDAP, or even something like SAML.

Thanks,

Luke

[lancepioch]

If this were to be supported, then we should most likely use the following: https://github.com/Adldap2/Adldap2-Laravel

[TheFonix]

Would love to see this integrated <3 !

[lancepioch]

Any ideas on the best way to integrate this optionally? Just load the service provider if the setting for ldap is set to true? Otherwise don't?

[DaneEveritt]

@lancepioch I think this also introduces a layer of complexity when it comes to handling the user models. My experience with LDAP is effectively 0, so I'm curious how easy it is to flip between using this (LDAP) and not. Is it something that is going to introduce a ton of new layers to manage, or are you envisioning it to mostly be configuration options and then a pretty silent use for the average user?

[LukeFlynn]

I'm not sure about integrating it around the existing model, I have zero experience implementing LDAP as an auth backend in applications... something like @lancepioch said seems apt.

[TheFonix]

Dont suppose there has been any advancements on this?

[DaneEveritt]

That would be correct @TheFonix, been focusing efforts at Daemon (de-)stabilization and Vuejs improvements.

[BrainStone]

That would be a great feature to have. Especially in combination with the group feature (#326).

So you could add and remove users through LDAP and have them assigned into groups automatically too.
Very useful for servers/teams that use multiple different serverices, so that they don't have to create dozen of accounts for each new user.

[MothGirlMusic]

LDAP would definitely be an amazing feature

[MrMadpro]

Is there any advancement on LDAP or SAML integration?

[DaneEveritt]

No.

[MothGirlMusic]

what do you guys need to make that happen?

[DaneEveritt]

A few clones of me, way more free time than I currently have, and a deep enough understanding of LDAP to even begin implementing it.

Honestly, unless someone opens a PR implementing this, it's not going to happen most likely.

[Holt31]

@DaneEveritt I would really love to see this feature integrated into the Panel.
I know how to integrate an LDAP-Login into PHP, also a SAML-Login, but I'm only an amateuer, so unfortunately I can't help you with the integration.

But if you're willing to integrate this, I can provide an Testing-Environment for you, if you need it.

[MothGirlMusic]

yunohost website also has the exact LDAP command needed to look up any username in its database. so all that is needed is to make it look up username and password with that almost exactly like getting it from SQL. and easy enough to make a little drop down thing on the login choosing which method you want to use, normal sql and ldap. it'd be really neat to have this... and as you can see here, i'm willing to help you with providing research into ldap itself and holt with his testing environment... etc.

right now though, i'm trying to make a yunohost app myself to see how much i can do and what is needed for me to learn to help since tbh i'm not that good at coding either. but would love to support this project how i can

[DaneEveritt]

Again, because I'm not sure I made it super clear, unless someone _else_ PRs this functionality it isn't going to happen. I already barely have the time to maintain this software in its current state. I certainly do not have the time right now to research and implement an entirely new feature.

Sorry.