GitLab as LDAP source

Release notes

GitLab is already managing a user database. It would be nice to be able to access it using the LDAP protocol.

Problem to solve

A company has many services like FTP, Mail, NextCloud, Perforce... they all plug to an LDAP server.

Gitlab could act a single source of truth and already offers an unparalleled edition of users and groups.

Intended users

User experience goal

Have a sidecar container exposing a LDAP endpoint with basic functionalities:

  • Password authentication
  • List users
  • List groups

Proposal

TBD

Permissions and Security

Gitlab can map project members to LDAP groups.

Setting up permissions in LDAP is tedious, GitLab already offers all the needed granularity with nested projects and members.

Dummy projects can act as Access Control Lists.

What does success look like, and how can we measure that?

Ditching the middle men like ActiveDirectory, OpenLDAP.

What is the type of buyer?

Small to mid-size companies