server icon indicating copy to clipboard operation
server copied to clipboard

[feature request] LDAP support

Open ldpr opened this issue 8 months ago • 6 comments

Is your feature request related to a problem? Please describe.

There aren't many good options when it comes to opensource chat for teams. Mattermost is restricting features in favour of pushing enterprise. Zulip & rocket chat are decent alternatives. Teams & Slack are proprietary. XMPP & IRC are dated and have various drawbacks.

Describe the solution you'd like

If spacebar was able to include LDAP support it could expand the userbase beyond "just a discord alternative" to a full slack/teams alternative too. It could be great for furthering adoption among more technical people which might bring in further code contributions also.

Describe alternatives you've considered

Noted in first answer. There just aren't any "great" options in this specific space.

Additional context

Pretty please!

ldpr avatar May 05 '25 17:05 ldpr

what is LDAP exactly?

MathMan05 avatar May 06 '25 03:05 MathMan05

what is LDAP exactly?

https://en.wikipedia.org/wiki/Lightweight_Directory_Access_Protocol

LDAP stands for Lightweight Directory Access Protocol, a standard application protocol for accessing and managing distributed directory services. It's used for storing and retrieving information about users, groups, devices, and other network resources, making it a crucial component for centralized user management and authentication in many enterprise environments

Puyodead1 avatar May 06 '25 03:05 Puyodead1

what is LDAP exactly?

Just to give a more everyday explanation:

It's a central store for accounts. So for example, Gitea and Nextcloud both support LDAP. If spacebar were to support it too, I could create a single account for any user on the LDAP server, hook up Gitea, Nextcloud and Spacebar to LDAP and this user could sign into any of the three services using the same set of credentials.

Gitea and Nextcloud are just two examples, I tried to pick decently popular OSS projects. It makes it a lot easier for admins, and for users to use a centralised group of services. Regarding spacebar, instead of querying it's own database for accounts, it'd query the LDAP server and if the account exists, allow the client to login.

It's somewhat close to "sign in with google" that you see on some sites if that helps.

ldpr avatar May 06 '25 03:05 ldpr

LDAP is an excellent SSO option, although I'm not sure how integrating LDAP w/Spacebar would work, seeing as it's designed to be more of an open-registration platform for communication with friends and strangers.

I'm assuming you wouldn't want a bunch of random folk registering, and then creating users in your LDAP infrastructure lol.

PhoenixSheppy avatar May 14 '25 13:05 PhoenixSheppy

LDAP is an excellent SSO option, although I'm not sure how integrating LDAP w/Spacebar would work, seeing as it's designed to be more of an open-registration platform for communication with friends and strangers.

I'm assuming you wouldn't want a bunch of random folk registering, and then creating users in your LDAP infrastructure lol.

Registration can be disabled in spacebar.

Puyodead1 avatar May 14 '25 13:05 Puyodead1

LDAP is an excellent SSO option, although I'm not sure how integrating LDAP w/Spacebar would work, seeing as it's designed to be more of an open-registration platform for communication with friends and strangers. I'm assuming you wouldn't want a bunch of random folk registering, and then creating users in your LDAP infrastructure lol.

Registration can be disabled in spacebar.

This! But also with LDAP you could still allow public registration. LDAPs real power lays behind it's groups, so anyone could have a normal account and if you wanted to still keep parts section off (say for example staff only services or whatever) then normal accounts couldn't access it without being in the staff group. That's why 0days and vulnerabilities with regards to LDAP escalation (etc) are worth a lot of money. That's neither here nor there though.

ldpr avatar May 14 '25 13:05 ldpr