search

dwimberger / crowd-ldap-server

Implementation of an LDAP server that delegates authentication to an Atlassian Crowd installation using the Crowd REST API.
Apache License 2.0
71 stars 59 forks source link

working with pam #16

Open sixt06 opened 10 years ago

sixt06 commented 10 years ago

Hi,

I'm trying to connect linux login PAM to crowd-ldap-server. https://help.ubuntu.com/community/LDAPClientAuthentication?action=fullsearch&value=linkto%3A%22LDAPClientAuthentication%22&context=180

But, crowd-ldap-server may not support posixAccount schema yet. A ldap client was failed to search account. Do you have a plan to support the posixAccount schema? It will be great if it is possible.

Thanks, Hayoung

dwimberger commented 10 years ago

Hi Hayoung,

crowd-ldap-server is a proxy-server with an adapter that receives LDAP requests and tries to adapt/convert/fullfill these with calls to the REST API for Crowd.

It currently does not support the posixAccount Schema, because crowd does not store posix information out of the box.

However, I think it may be possible use attributes of the user resource: https://developer.atlassian.com/display/CROWDDEV/Crowd+REST+Resources#CrowdRESTResources-UserResource

So far there is no plan to do this (contributions are welcome) and I am currently quite busy with other things, so the only thing I can do is to put it on a list with a low priority.

Best Regards, Dieter

imduffy15 commented 10 years ago

Bump...

Any updates on this. I'm having a simular issue.

Jul 11 15:04:12 localhost nslcd[3016]: [7b23c6] passwd entry ou=groups,dc=crowd does not contain uid value
Jul 11 15:04:12 localhost nslcd[3016]: [7b23c6] passwd entry ou=users,dc=crowd does not contain uid value
khera commented 8 years ago

Having the uidNumber and gidNumber attributes map to the posixAccount schema on return would make my day! I can use it without just for passwords but it would be so much nicer to have it provide the id numbers.