search

tjcsl / ion

TJ Intranet 3
https://ion.tjhsst.edu
GNU General Public License v2.0
100 stars 89 forks source link

Allow authorization without use of a Kerberos account (only with LDAP simple bind) #105

Closed jwoglom closed 6 years ago

jwoglom commented 9 years ago

The eighthoffice account formerly did not exist in Kerberos, making login impossible in Ion. In Iodine, login only required using an LDAP simple bind for users such as eighthoffice. While adding users to Kerberos is an option, allowing authorization for specific users without it allows them to login when our Kerberos infrastructure is down and we should consider adding this functionality back in the future.

pefoley2 commented 8 years ago

So, should this be an alternative to master password that tries a simple bind w/ the supplied creds? I assume we'd want a hard-coded list of valid usernames for this?

jwoglom commented 8 years ago

This was to allow the eighth period office user, before it was in Kerberos, to log in. Don't believe there are any other non-krb accounts that I know of, so this is on hold for now.

On Tue, Mar 1, 2016, 1:28 PM Peter Foley notifications@github.com wrote:

So, should this be an alternative to master password that tries a simple bind w/ the supplied creds? I assume we'd want a hard-coded list of valid usernames for this?

— Reply to this email directly or view it on GitHub https://github.com/tjcsl/ion/issues/105#issuecomment-190843083.