Gitlab CE password synchronized with Active Directory

Hi all,

I've configured Gitlab CE with OmniAuth and a CAS server (Single sign on) that authenticates against an Active Directory. The login process is working fine with the auto_create option to make the automatic signup, etc... but when the user is logged in is asked for set a password in order to use the https protocol to use the git repositories.

Is there any property or configuration to synchronize the Gitlab password with the Active Directory to avoid this extra step for the user?

Thank you in advance!

You may want to consider combining CAS with LDAP integration. CAS provides the web auth/SSO while LDAP provides the Git over HTTPS auth.

Thanks @dblessing but I still have some problems :-(

I've configured LDAP as you said and now I have both enabled (CAS & LDAP). But now occurs that when a user signs in for the first time via CAS, the user is created but the LDAP Identity is not associated automatically to the user and the fields mapped such as email or First name are not imported from LDAP.

Here's my LDAP and CAS config:

LDAP

gitlab_rails['ldap_enabled'] = true gitlab_rails['ldap_servers'] = YAML.load <<-'EOS' main: # 'main' is the GitLab 'provider ID' of this LDAP server label: 'LDAP' host: 'ldap.mydomain.org' port: 636 uid: 'sAMAccountName' method: 'plain' # "tls" or "ssl" or "plain" bind_dn: 'CN=LDAP Connector,CN=Users,DC=local,DC=mydomain,DC=org' password: 'the_password' active_directory: true allow_username_or_email_login: false block_auto_created_users: false base: 'ou=Users,dc=local,dc=mydomain,dc=org' user_filter: '' attributes: username: 'sAMAccountName' email: 'mail' name: 'cn' first_name: 'givenName' last_name: 'sn'

CAS

`gitlab_rails['omniauth_enabled'] = true gitlab_rails['omniauth_allow_single_sign_on'] = 'cas3' gitlab_rails['omniauth_auto_sign_in_with_provider'] = 'cas3' gitlab_rails['omniauth_block_auto_created_users'] = false

gitlab_rails['omniauth_auto_link_ldap_user'] = false

gitlab_rails['omniauth_auto_link_saml_user'] = false

gitlab_rails['omniauth_external_providers'] = ['twitter', 'google_oauth2']

gitlab_rails['omniauth_providers'] = [ { "name"=> "cas3", "label"=> "cas3", "args"=> { "url"=> 'https://mydomain.org', "login_url"=> '/sso/login', "service_validate_url"=> '/sso/p3/serviceValidate', "logout_url"=> '/sso/logout' } } `

I found the problem!

There was a mistake in the LDAP config in this line:

method: 'plain' # "tls" or "ssl" or "plain"

that should be:

method: 'ssl' # "tls" or "ssl" or "plain"

Thank you very much!

closed