nsedit icon indicating copy to clipboard operation
nsedit copied to clipboard

External authentication

Open richard-underwood opened this issue 8 years ago • 2 comments

Hi,

I could do with integrating the password authentication with AD (LDAP). Having a think about this, rather than integrating directly, it would be easy to set it up with an option to trust $_SERVER['REMOTE_USER'], effectively offloading the authentication to Apache. This would be the most flexible as Apache already has extensive authentication options.

Is this something you'd be interested in including, or should I keep this as a local modification?

Thanks.

richard-underwood avatar Sep 19 '16 09:09 richard-underwood

It is far more efficient than building our own implementation. We would need to think about groups though, since that is an issue many people would want to see implemented. Any thoughts on that?

tuxis-ie avatar Sep 19 '16 10:09 tuxis-ie

Groups would be easier with direct LDAP integration, but I'll have a think about doing it through Apache. However, I think the first step would be to implement groups without any external integration for normal installations. I can have a go at this, if you like.

One thing, though, I have no idea how WeFact fits in with groups. I'll try and take it into account, but someone who uses it would need to test that there are no conflicts.

richard-underwood avatar Sep 19 '16 10:09 richard-underwood