Local authentication plugin

[fiveoaksmn]

I would like to link Saltcorn to my Active Directory but can't use the standard ldap plugin. Need to specify the CA certificate. I took the ldap auth module code and modifued it and installed as a local plugin successfully. However Saltcorn is not recognizing it as an authentication plugin. The module is exporting authentication. Is there some limitation for locally installed plugins that they can't be used for authentication?

[pyhedgehog]

1. Auth plugins works only if installed in root (aka public) tenant. Than you can install and use it to other tenants also.
2. You must restart saltcorn after installing of auth plugin.

PS: No, plugins installed with source='local' doesn't have any specific limitations (except obvious — you can't install them in tenant if public tenant admin set limits for unsafe plugins).

[TecnotramitGestion]

Hi, I'm on version 0.9.1-beta.8 with Nodejs v18.17.1.

I've installed ldap-auth plugin in root instance. I can authenticate correctly in root tenant but the only login page that is shown at the "child's" is the default (email/password).

The plugin it's not shown in children's module section. Maybe I'm missing some installation steps?

[pyhedgehog]

You still meed to install and configure plugin in every tenant.

[TecnotramitGestion]

But how? I think it's no documented in saltcorn's wiki... And the plugin it's only shown in main (root) tenant...

[pyhedgehog]

@glutamate I don't understand it too. Buttons for login page depends on tenant-installed auth plugins (https://github.com/saltcorn/saltcorn/blob/4d49bf2869217ecc439d9305cb799b536e8fc9c1/packages/server/auth/routes.js#L207-L217), but only plugins installed to root tenant registered to passport (https://github.com/saltcorn/saltcorn/blob/4d49bf2869217ecc439d9305cb799b536e8fc9c1/packages/server/app.js#L251-L253). Not sure what configuration (i.e. connection to ldap) will be used.