Feature #5702: Please add ldap filters for authentication - Redmine

Actions

Copy link

Feature #5702

closed

Please add ldap filters for authentication

Added by Nico Tourneur over 14 years ago. Updated over 12 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Category:

LDAP

Target version:

Start date:

2010-06-16

Due date:

% Done:

Estimated time:

Resolution:

Duplicate

Description

Hello,

It would be great to add the abaility to filter on group membership to the LDAP authentication module.

Actually, I know it's possible to change the search base so only users inside of a defined OU could use the application.
With large LDAP setup (lots of users, LDAP used by multiple apps) you have several users in different OU which will need to be able to use the same application so we use group membership.

It would be really a plus if you add some field to let us do that kind of filtering, something like cacti has would be perfect. So if we can specifiy a group DN, a membership field (like memberUid) and a group member type (username or DN of the user), everything would be perfect.

Thanks and regards,

Related issues

Actions

Copy link

Updated by Felix Schäfer over 14 years ago

I can't remember exactly what the LDAP settings in the stock redmine look like, but can't you specify a filter? It's been a while since I got into LDAP that deep, but I seem to remember that the stuff you are asking for could be achieved with a well crafted filter.

Actions

Copy link

Updated by Nico Tourneur over 14 years ago

In the web form, in only see the base DN that could be used as some kind of filter, unfortunately it's not enough. Is there any other place where I can configure that ? yml file ?

Actions

Copy link

Updated by Felix Schäfer over 14 years ago

Nico Tourneur wrote:

In the web form, in only see the base DN that could be used as some kind of filter, unfortunately it's not enough. Is there any other place where I can configure that ? yml file ?

No, then it's in one of the patches I applied sorry. Depending on your skill level, search around the tracker, I think there are 2 patches to include more options in the LDAP settings which also include the possibility to specify an arbitrary filter. Be aware though that the patches probably won't apply cleanly to trunk due to several changes to the LDAP Auth between 0.9-stable and trunk.

Actions

Copy link