search

mazfil / lab-allocator

COMP3500 - Resource maximisation planning system for labs
3 stars 1 forks source link

LDAP Authentication #100

Open alexdboxall opened 3 weeks ago

alexdboxall commented 3 weeks ago

This is from issue #86, but splitting it into its own issue to keep track of it easier.

From ANU:

We would prefer your solution to use ANU LDAP, and LDAPS service that is accessible from almost all IPs on campus. You should be able to find plenty of documentation on the web for using LDAP as an authentication source, also as a name service for people names etc.

The server URL is ldaps://ldap.anu.edu.au and the baseDN is "ou=People,o=anu.edu.au" (note, this baseDN is not as per modern LDAP usage, but it is what it is)

Start looking into how LDAP auth can be done by our system.

alexdboxall commented 3 weeks ago

There are some LDAP libraries for both Node and for Java that we can look into for authentication.

e.g. https://www.npmjs.com/package/ldap-authentication or https://www.baeldung.com/java-ldap-auth

Need to investigate these further to ensure that they are actually secure - we don't want staff passwords exposed if one of these libraries is a dodgy.