Project

General

Profile

HTTP authentication -- LemonLDAP

Added by Thomas Bétrancourt over 12 years ago

Hi!

I'm using LemonLDAP::NG to authenticate my users in our applications.

LemonLDAP provides to applications some users attributes in HTTP headers.

I'm would like to write a module which can authenticate users with LemonLDAP.

I took a look on https://github.com/AdamLantos/redmine_http_auth but this plugins seems to not be compatible with redmine 2.x.

Below that i would like:

  • The user comes for the first time on the application:
  • At this moment, the module looks for a HTTP header (i.e. REMOTE_USER). If this header is defined
  • The module creates the user (other HTTP headers will provide "first name", "last name", "mail" ...)
  • Users can also login through core authentication systems (internal, LDAP, OpenID...)
  • A existing user comes on the application:
  • The module looks for the HTTP header containing the username
  • If the user is found, the module log in the user
  • If the user is logged in through LemonLDAP, user cannot change anything into its profile (all values in read-only)

My problem is to known what's the best way to do this with redmine. I'm not used to ruby, but i know read the manual. I look for plugin development docs, but a lot of those docs are about previous versions of redmine... :(

I expect from you the maximum of tips and tricks about this demand... :D

Thank you for your support,

Regards,
rclsilver