Vote #63119
完了Add support for alternate (non-LDAP) authentication
100%
説明
I would like to see a way to add a custom external authenticator. Currently, the "New Authentication Modes" link assumes an LDAP source. Some more information about what I'm trying to do is here: http://www.redmine.org/boards/1/topics/show/495
Once you subclass AuthSource, there should be a way to make it visible to React so that it can be selected in the Authentication administration page.
journals
This is also required for kerberos authentication.
If the application run under apache, it should be able to receive the user from environment.
--------------------------------------------------------------------------------
This is simple, as I don't know ruby I cannot promis it is the best solution.
But you can have configuration option for a request variable to take the user from.
In order to support basic authentication (kerberos or SSL) under apache with mod_rails, I only had to do the following:
<pre><code class="ruby">
# Returns the current user or nil if no user is logged in
def find_current_user
+ if request.env["REMOTE_USER"]
+ ( User.find_by_login(request.env["REMOTE_USER"]) rescue nil)
- if session[:user_id]
+ elsif session[:user_id]
# existing session
(User.active.find(session[:user_id]) rescue nil)
</code></pre>
As "[1]":http://www.redmine.org/boards/2/topics/show/127 wanted to have a different variable... So I guess the actual string may be configurable.
This is very important for enterprise deployment, please set milestone.
Thanks!
--------------------------------------------------------------------------------
Very much agree.
We use this together with mod_auth_kerb
--------------------------------------------------------------------------------
I'm also interested to have external authentication support using Kerberos.
--------------------------------------------------------------------------------
I'd like to see Kerberos support added as well.
--------------------------------------------------------------------------------
I'm agree. It would be nice to be able to use Kerberos authentication.
--------------------------------------------------------------------------------
I've added a custom external authenticator to Redmine by means of a plugin that modifies the Authentication Sources view to include something other than LDAP.
http://www.redmine.org/projects/redmine/wiki/Plugin_List/#Mac-OS-X-Identity-Services-plugin
It would be helpful if there was a more standard way to add a subclass of AuthSource and a custom form for it, but what I've done so far works fine.
-- Brian Wells
--------------------------------------------------------------------------------
I've change AuthSource so it can now be extended to support other external auth sources (i.e. removed the LDAP assumption). An example of how to add a new AuthSource can be seen in my "redmine_sso_client":http://github.com/edavis10/redmine_sso_client plugin. It adds a new AuthSource model, controller, form, and a menu item.
r3743, r3744, r3745
--------------------------------------------------------------------------------
related_issues
relates,New,2356,SSO Authentication (CAS Jasig)