search

KvasirSecurity / Kvasir

Kvasir: Penetration Test Data Management
Other
424 stars 86 forks source link

Support LDAP Access Control #156

Open tbroset opened 9 years ago

tbroset commented 9 years ago

Feature request for LDAP Access Control support

I would like to be able to simplify user account management by tying it to an already available system. The basics are available here, it just needs a few modifications in appadmin I believe. http://web2py.com/books/default/chapter/29/09/access-control#Other-login-methods-and-login-forms

grutz commented 9 years ago

I have had a number of thoughts on this, whether or not Kvasir should build out some configuration for it in its YAML file to be processed in 00_settings.py. https://github.com/KvasirSecurity/Kvasir/blob/master/models/00_settings.py#L64 has some structure around it but it's never been tested/used so it's likely just dead code.

Ultimately the EASIEST thing to do immediately is to have those that want third party authentication to include their own configuration in the models/ directory until a final decision is made. For now just make a modules/99local.py file with local settings. Using the 99 prefix means you should be able to overwrite anything set up by Kvasir:

from gluon.contrib.login_methods.ldap_auth import ldap_auth
auth.settings.login_methods.append(ldap_auth(mode='ad',
   server='my.domain.controller',
   base_dn='ou=Users,dc=domain,dc=com'))

I've added the file to .gitignore so it won't be absentmindedly added to any PRs. See commit https://github.com/KvasirSecurity/Kvasir/commit/72ea3941f01f3d74ab65504546210cd908fca47a