9001 / 9001/copyparty

External user onboarding / linking: LDAP

未关闭
#194 6 条评论 15 个 reaction 已指派 1 人 已被 @9001 认领 在 GitHub 查看
enhancement
主要语言
Python
星标
46.7k
派生
1.9k
平均合并
9 天 2 小时
30 天内合并 PR
4

描述

**is your feature request related to a problem? Please describe.**
Having a simple config to manage your users is nice for a simple small personal setup, but as soon as you start to collaborate with different users or maybe also have other self hosted services this will become lots of duplication for onboarding users.

**Describe the idea / solution you'd like**
It would be nice to have the definitions of users have the possibility to come from somewhere else.
Primarily the passwords. if we introduce groups (#188) this can also help to assign permissions via LDAP to different shares easily.
One of the simplest, most flexible solutions would probably be LDAP support, which you can use to query users / groups.

**Additional considerations**
There also exists forward http headers that can be used for auth. I think this is already possible with the IDP SSO?
One issue i can see with this forward auth is that I dont know how it will play with other services like SFTP, i dont think they support something like this - you could think about giving the user the option to set dedicated passwords after login for this, but then you will have to manage service specific passwords again, but we wanted to delegate auth to the proxy so we didnt win anything...

Most flexible would probably be supporting LDAP too, this way you could also think about supporting SSH keys for the SFTP service

贡献指南

打开贡献指南

调研方向

该 issue 描述了为用户身份验证和组映射添加 LDAP 支持。首先检查现有的身份验证代码,可能位于处理用户管理和 SSO 的模块中。查找用户凭据在哪里进行验证,以及权限在哪里分配。了解 SFTP 和其他服务如何与当前身份验证系统集成。'Done' 意味着用户和组可以从 LDAP 服务器获取,并据此映射权限。

由索引模型根据 Issue 内容生成。

评估

技术栈
python
领域
authentication, backend
Issue 类型
功能
难度
4/5
预计耗时
3-5 天
活跃度
停滞
描述清晰度
基本清楚
新手友好度
35/100

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。