Skip to content

LDAP Support

Problem Statement

What is the issue being faced and needs addressing? Users need to be created Manually, an LDAP Integration would be cool!

Who will benefit?

Will this fix a problem that only one user has, or will it benefit a lot of people

I Run an OpenLDAP instance locally to Maintain User Accounts and Passwords, to only maintain 1 Database of User Accounts is way easier than maintaining multiple. Most of the More Advanced Users, (Or Maybe Enterprise Customers) Have an AD running and would want to integrate that.

Benefits and risks

What benefits does this bring?
    - reduced Administrative Work
    - extend functionality
    - 1 Password/ User Account for multiple Services

What risks might this introduce?
    - Implementation of 3rd Party Network Services
    - May Dependent on 3rd Party Software/ Library
    - Limited Encryption on Authentication Data
    - More Troubleshooting for Related Issues

Proposed solution

How would you like to see this issue resolved? Direct Core Implementation of LDAP or Side-Script that uses an API (If there is one, the docs seem to be offline)

Alternatives

  • if you could disable the Authentication, you could Authenticate to LDAP via Authelia + NGINX.
  • Implementation of SAML or Other SSO for Authentication with local Gitlab Instance

Examples

Are there any examples of this which exist in other software? [Written in Python]

Priority/Severity

  • High (This will bring a huge increase in performance/productivity/usability)
  • Medium (This will bring a good increase in performance/productivity/usability)
  • Low (anything else e.g., trivial, minor improvements)