LDAP Support
Problem Statement
What is the issue being faced and needs addressing? Users need to be created Manually, an LDAP Integration would be cool!
Who will benefit?
Will this fix a problem that only one user has, or will it benefit a lot of people
I Run an OpenLDAP instance locally to Maintain User Accounts and Passwords, to only maintain 1 Database of User Accounts is way easier than maintaining multiple. Most of the More Advanced Users, (Or Maybe Enterprise Customers) Have an AD running and would want to integrate that.
Benefits and risks
What benefits does this bring?
- reduced Administrative Work
- extend functionality
- 1 Password/ User Account for multiple Services
What risks might this introduce?
- Implementation of 3rd Party Network Services
- May Dependent on 3rd Party Software/ Library
- Limited Encryption on Authentication Data
- More Troubleshooting for Related Issues
Proposed solution
How would you like to see this issue resolved? Direct Core Implementation of LDAP or Side-Script that uses an API (If there is one, the docs seem to be offline)
Alternatives
- if you could disable the Authentication, you could Authenticate to LDAP via Authelia + NGINX.
- Implementation of SAML or Other SSO for Authentication with local Gitlab Instance
Examples
Are there any examples of this which exist in other software? [Written in Python]
- Script by the Mumble-Team to Authenticate LDAP to the Murmur Server via ZeroC Ice: github.com/mumble-voip/mumble-scripts
- LDAP Authenticator to Use with Synapse (Matrix-Server) created by the Matrix Team github.com/matrix-org/matrix-synapse-ldap3
Priority/Severity
-
High (This will bring a huge increase in performance/productivity/usability) -
Medium (This will bring a good increase in performance/productivity/usability) -
Low (anything else e.g., trivial, minor improvements)