Adambean / gitlab-ce-ldap-sync

Synchronise users and groups (including group members) from an LDAP instance with Gitlab CE (and EE in free tier) self-hosted instance(s).
Apache License 2.0
59 stars 23 forks source link

Request: Sync sshPublicKey from LDAP into Gitlab #11

Open sunrez opened 5 years ago

sunrez commented 5 years ago

Hi,

First, thank you so much for taking the time to create this very useful solution to sync Gitlab against an LDAP server!

I had a feature request: Would you consider adding support to pull available sshPublicKeys from a user's LDAP entry and sync that into Gitlab?

I AM able to get OpenSSH to pull sshPublicKeys from OpenLDAP using AuthorizedKeyCommands (https://serverfault.com/questions/653792/ssh-key-authentication-using-ldap , https://askubuntu.com/questions/776700/ssh-ldap-authorizedkeyscommand ) but unfortunately GitLab doesn't honor this.

This is also a Gitlab-EE feature ("sync_ssh_keys").

Adambean commented 5 years ago

This is a good idea.

The configuration will need an option as how to handle extra keys, e.g. those that a user has added to Gitlab themselves but not found in their directory object. (Probably a rare scenario.)