Feature #245

Fix LDAP user management

Added by Eric Shamow almost 2 years ago. Updated over 1 year ago.

Status:Closed Start:05/11/2010
Priority:Normal Due date:
Assigned to:Eric Shamow % Done:

0%

Category:Authentication
Target version:-
Backlog: Difficulity:
Votes: 0

Description

In the current version, user management is available via two options: you can create and populate stand-alone users, or you can enable LDAP and allow any user who can authenticate to automatically create an account.

It is desireable to allow LDAP for authentication but to still control authorization, either by enabling an LDAP filter for a particular group, or by creating user accounts which use LDAP for auth.

The latter is doable (thanks olevy) by commenting out the following line in app/controllers/users_controller.rb:

config.actions.exclude :create

This enables LDAP users to be added, but the method is kludgy. There should either be an LDAP filter option (preferable) or a config or GUI-based way to turn limited LDAP on.


Related issues

duplicated by Foreman - Feature #149: Better LDAP user control Rejected 01/07/2010

History

Updated by Ohad Levy over 1 year ago

  • Target version set to 0.1-6

Updated by Ohad Levy over 1 year ago

  • Status changed from New to Feedback
  • Assigned to changed from Ohad Levy to Eric Shamow

would you be able to confirm that by introducing the internal authentication scheme, the problem is resolved? (can be found in the latest develop branch).

Updated by Ohad Levy over 1 year ago

  • Status changed from Feedback to Need more information
  • Target version deleted (0.1-6)

Updated by Ohad Levy over 1 year ago

  • Status changed from Need more information to Closed

Also available in: Atom PDF