Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable LDAP based group handling with oauth authentication #4303

Open
dkrupp opened this issue Jul 31, 2024 · 0 comments
Open

Enable LDAP based group handling with oauth authentication #4303

dkrupp opened this issue Jul 31, 2024 · 0 comments

Comments

@dkrupp
Copy link
Member

dkrupp commented Jul 31, 2024

#4160 introduces oauth based user authentication

It should be possible to use LDAP based group lookup after successful oauth based authentication.
Today, the LDAP based group lookup is configured together with the LDAP based authentication.
It would be useful to split the authentication and authorization configuration in the server_config.json

Introduce the following element in teh server_config.json

https://codechecker.readthedocs.io/en/latest/web/authentication/#external-authentication-methods

    "ldap_groups": {
      "enabled" : false,
      "authorities": [
        {
          "connection_url" : "ldap://ldap.example.org",
          "username" : null,
          "password" : null,
          "referrals" : false,
          "deref" : "always",
          "groupBase" : null,
          "groupScope" : "subtree",
          "groupPattern" : "(&(objectClass=group)(member=$USERDN$))",
          "groupNameAttr" : "sAMAccountName"
        }
      ]

If such an element is enabled then after sucessful authentication the group membership should be looked up in these ldap directories too.

With this change, the similar fields in the method_ldap element become redundant and can be removed.

@vodorok vodorok changed the title enable LDAP based group handlign with oauth authentication Enable LDAP based group handling with oauth authentication Aug 1, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant