search

tuxis-ie / nsedit

DNS Editor working with PowerDNS's new API
GNU General Public License v2.0
199 stars 55 forks source link

External authentication #121

Open richard-underwood opened 7 years ago

richard-underwood commented 7 years ago

Hi,

I could do with integrating the password authentication with AD (LDAP). Having a think about this, rather than integrating directly, it would be easy to set it up with an option to trust $_SERVER['REMOTE_USER'], effectively offloading the authentication to Apache. This would be the most flexible as Apache already has extensive authentication options.

Is this something you'd be interested in including, or should I keep this as a local modification?

Thanks.

tuxis-ie commented 7 years ago

It is far more efficient than building our own implementation. We would need to think about groups though, since that is an issue many people would want to see implemented. Any thoughts on that?

richard-underwood commented 7 years ago

Groups would be easier with direct LDAP integration, but I'll have a think about doing it through Apache. However, I think the first step would be to implement groups without any external integration for normal installations. I can have a go at this, if you like.

One thing, though, I have no idea how WeFact fits in with groups. I'll try and take it into account, but someone who uses it would need to test that there are no conflicts.