search

donaldzou / WGDashboard

Simple dashboard for WireGuard VPN written in Python w/ Flask
Apache License 2.0
1.41k stars 207 forks source link

Active Directory / LDAP Sync. #321

Open DaanSelen opened 3 weeks ago

DaanSelen commented 3 weeks ago

Hello everyone,

This might be a bit of a high request. But an Active Directory or external authentication provider connection would be a real good way to help this software fit in in corporate structures.

I do not know if it is even possible with the current code base. But it might be a good project!

donaldzou commented 3 weeks ago

I think this is feasible, with my previous with LDAP and ASP.NET, we just need to pass the NT Domain/Username on every request, and the Flask router can verify it? Kinda like how API key works currently?

By external authentication do you mean SSO?

DaanSelen commented 3 weeks ago

I think this is feasible, with my previous with LDAP and ASP.NET, we just need to pass the NT Domain/Username on every request, and the Flask router can verify it? Kinda like how API key works currently?

By external authentication do you mean SSO?

Hey Donald, what I meant first and ideally would be that people can authenticate with the credentials stored in an Active Directory and LDAP is another external provider. SSO would also be good to have.

I mean the more features the better, but make sure it is managable, for now and the future!

donaldzou commented 3 weeks ago

I think this is feasible, with my previous with LDAP and ASP.NET, we just need to pass the NT Domain/Username on every request, and the Flask router can verify it? Kinda like how API key works currently? By external authentication do you mean SSO?

Hey Donald, what I meant first and ideally would be that people can authenticate with the credentials stored in an Active Directory and LDAP is another external provider. SSO would also be good to have.

I mean the more features the better, but make sure it is managable, for now and the future!

Ah gotcha.. I think we can do something like this example:

https://stackoverflow.com/a/58307806/26651629

DaanSelen commented 3 weeks ago

I think this is feasible, with my previous with LDAP and ASP.NET, we just need to pass the NT Domain/Username on every request, and the Flask router can verify it? Kinda like how API key works currently? By external authentication do you mean SSO?

Hey Donald, what I meant first and ideally would be that people can authenticate with the credentials stored in an Active Directory and LDAP is another external provider. SSO would also be good to have. I mean the more features the better, but make sure it is managable, for now and the future!

Ah gotcha.. I think we can do something like this example:

https://stackoverflow.com/a/58307806/26651629

Hey, good idea! I can however not judge this. I am far from a LDAP expert, but I do know that companies or small organisations like the feature!