goharbor / harbor

An open source trusted cloud native registry project that stores, signs, and scans content.
https://goharbor.io
Apache License 2.0
23.72k stars 4.73k forks source link

Support multiple LDAP integrations #6878

Open shen3lu4 opened 5 years ago

shen3lu4 commented 5 years ago

Is your feature request related to a problem? Please describe. Currently I can only set up 1 LDAP integration.

Describe the solution you'd like We have a need to support multiple LDAPs simultaneously.

Describe the main design/architecture of your solution Add a way for user to configure multiple LDAPs. All configured LDAPs will be used for user authentication and authorization.

ghost commented 5 years ago

This is a great idea @shen3lu4! I think we need to think through the basics: how do we prioritize the different LDAP servers? What if a user exists in both? Are secondary / tertiary LDAP servers used for fallback, or do we route auth requests?

I've done something like this before for an internal cloud platform and it wasn't terribly difficult, but there are some things we should define first.

Is this something you want to contribute to the project? If so we'll start with a proposal in goharbor/community so that we can review and provide feedback.

akamitmishra commented 4 years ago

Hello, any traction on this? This is a really useful functionality.

titou10titou10 commented 4 years ago

Maybe the idea could be extended: manage users from multiple sources: LDAP and local database (for user other than the super admin) and still allow to create "local" users nd when login, choose to login from LDAP source or "local db" source, like in gitlab

github-actions[bot] commented 2 years ago

This issue is being marked stale due to a period of inactivity. If this issue is still relevant, please comment or remove the stale label. Otherwise, this issue will close in 30 days.

pavel-z1 commented 1 year ago

We need this feature too

elowndes commented 5 months ago

We need this feature too. Please upvote.