Authentication changes

[calvin-shirley]

As of today, CITES is no longer allowing LDAP/LDAPS binds to Active Directory (for authentication), such as how Liquid is currently running. Thus, we will need to change Liquid's auth to one of the following:

• Shibboleth
• ACM Crowd
• LDAP + GSSAPI/Kerberos and packet signing
• LDAP + TLS encryption (using STARTTLS/STOPTLS commands)

[colegleason]

For TLS, see https://pythonhosted.org/django-auth-ldap/authentication.html#notes.

If crowd isn't too bad, let's switch to that.

[ace-n]

++ to Crowd (since IIRC that's what Admin was transitioning to for other services). The fewer configurations we have to maintain, the better.

This https://bitbucket.org/sannies/django-crowd-backend/overview and this https://djangosnippets.org/snippets/887/ might be useful resources. If we prefer to roll our own and/or the first two links are outdated (in which case, this http://stackoverflow.com/questions/25918873/send-soap-request-with-django and this https://developer.atlassian.com/display/CROWDDEV/SOAP+API seem more appropriate).

On Thu, Jan 8, 2015 at 4:58 PM, Cole Gleason notifications@github.com wrote:

For TLS, see https://pythonhosted.org/django-auth-ldap/authentication.html#notes.

If crowd isn't too bad, let's switch to that.

— Reply to this email directly or view it on GitHub https://github.com/acm-uiuc/liquid/issues/283#issuecomment-69265789.

[colegleason]

I would look at https://github.com/gbezyuk/django-crowd first.

[ace-n]

:thumbsup: Good find.

On Thu, Jan 8, 2015 at 5:35 PM, Cole Gleason notifications@github.com wrote:

I would look at https://github.com/gbezyuk/django-crowd first.

— Reply to this email directly or view it on GitHub https://github.com/acm-uiuc/liquid/issues/283#issuecomment-69270183.

[colegleason]

Working on this. Waiting on Crowd app from @CJS7070

[colegleason]

Note that this means no one can login to Intranet.

[colegleason]

@adilmehmoodbutt: Sorry, but I think you have the wrong issue tracker. I have no idea. Try contacting Gitlab support.

On Fri, Jan 9, 2015, 6:09 AM adilmehmoodbutt notifications@github.com wrote:

How can i migrate Gitlab accounts from standard accounts to ldap users along with work history.

— Reply to this email directly or view it on GitHub https://github.com/acm-uiuc/liquid/issues/283#issuecomment-69326710.

[calvin-shirley]

I have provided the application information to Cole; see him if you need it.