search

a-langer / nexus-sso

Single Sign-On patch for Nexus OSS
Eclipse Public License 1.0
70 stars 16 forks source link

SAML for authentification and LDAP for authorization #19

Closed dni-coder closed 5 months ago

dni-coder commented 8 months ago

Hello,

in the past we had ldap authentification and authorization, Now i implemented your patch and saml is working, but i need ldap for authorization.

Is this possible? If so, please can you give me a quick guide what i have to do?

Regards David

a-langer commented 8 months ago

Hello.

Yes, you can use multiple authorization realms at the same time. Just еnable LDAP Realm in the server administration panel and when logging in, enter your username and password as before.

dni-coder commented 8 months ago

Hello,

i know, but what i want is, to login via saml, but use the ldap to assign the groups and roles. I dont want two login methods.

a-langer commented 8 months ago

It won't work that way. The list of user groups is applied during login from the security realm. When logging in via SAML, groups are transferred from the IdP server. SAML does not currently support role mapping, so the roles in Nexus must match the groups on the IdP server. When logging in through the "LDAP Realm", groups are transferred from the ldap server.

In general, I don’t quite understand why this is needed. If you have an IdP server with an LDAP backend, then it will return the same groups as the LDAP server.

singhjoga commented 5 months ago

Hi, I am trying to use your container image in the Kubernetes and integrate with Keycloak. I have followed the steps given in SAML.md file. Below are my steps:

It starts successfully and I am able to login using the admin user. However, when I click on the "Signin with SSO" button, it redirects to /index.html and shows the "Error 500 Internal Server Error". I enabled the trace logging for the loggers you mentioned, but I do not see any errors in the nexus logs.

Can you please suggest what I might be doing wrong?

Thanks a lot in advance.

Best regards,

Joga config.zip

a-langer commented 5 months ago

@singhjoga Your question is not related to the topic of this issue. Please open a separate issue.

a-langer commented 5 months ago

I am closing due to lack of feedback.