How can I use existing LDAP groups to authorise users in Kallithea?

[Todd Morgan]

I'm happy to share my configuration once I get it up and running (not quite
there yet) and document it appropriately using your existing process :- )

I will investigate both the APIs and the patch tomorrow.

Thanks
    Todd

On Thu, May 7, 2015 at 10:49 PM, Mads Kiilerich <mads at kiilerich.com> wrote:

> On 05/07/2015 02:35 PM, Todd Morgan wrote:
>
>> Hi everyone,
>>    I managed to get my Kallithea authenticating nicely using LDAP (a
>> small typo in the LDAP Search filter was the cause).
>>
>
> You can perhaps contribute some debugging hints to the documentation.
>
>   can authenticate my users AOK now (getting the default anonymous level
>> of access) but now I need to lock it down appropriately using group access
>> definitions. I couldn't find a means of using the existing group
>> memberships (LDAP) as a means of configuring access to Kallithea's
>> repositories.
>>
>> I have approximately 100 repositories and 00's of users so manually
>> configuring permissions for access is not an option.
>>
>> Am I missing something obvious? I couldn't see how to configure the
>> system to get groups from an external source an into Kallithea?
>>
>> After a bit of searching I did find this
>> https://bitbucket.org/jfbeaumont/kallithea/commits/6cc72bef379ce1df856ed5f8b6f4b9661f661c57
>> which appears to suggest LDAP groups were explicitly not included.
>>
>> Are there any other options other than this available?
>>
>
> I would suggest looking into using scripting and the API to add/remove
> members from some of your groups based on your LDAP data. That will give
> you full control.
>
>  I would prefer not to have to "customise" a brand new installation with
>> unapproved (yet??) code.
>>
>
> It could quickly get upstreamed ...
>
> /Mads
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sfconservancy.org/pipermail/kallithea-general/attachments/20150507/55281a70/attachment.html>