bunkerity / bunkerity/bunkerweb
[FEATURE] add nginx ldap auth
- Dominant language
- Python
- Stars
- 10.9k
- Forks
- 643
- Avg merge
- 1d 10h
- Merged PRs (30d)
- 42
Description
### What's needed and why?
Hello, could it be possible to add, in addition to simple authentication, an authentication via LDAP? You can find more information about this at: https://nginx-ldap-auth-service.readthedocs.io/en/stable/running.html
This solution would allow access to certain sites to be restricted to specific user groups. Additionally, it would offer the possibility to replace, for our F5, the application connection method, which currently uses an equivalent web page. Thus, users could connect to sensitive servers, often lacking identification mechanisms, and secure their connections through LDAP authentication with username and password, similar to simple authentication, but benefiting from the enhanced security of LDAP.
Thank's
### Implementations ideas (optional)
_No response_
### Code of Conduct
- [x] I agree to follow this project's Code of Conduct
Contributor guide
Research direction
Start by reviewing the repository's existing simple-authentication implementation and the referenced nginx-ldap-auth-service documentation. Define how LDAP credentials and user-group restrictions should integrate with the current authentication flow; done should include a confirmed design and working LDAP authentication for protected sites.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- nginx
- Domain
- authentication, backend, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100