8000 Feature request: NTLM/Kerberos · Issue #1979 · wekan/wekan · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

Feature request: NTLM/Kerberos #1979

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
Michagogo opened this issue Oct 31, 2018 · 6 comments
Closed

Feature request: NTLM/Kerberos #1979

Michagogo opened this issue Oct 31, 2018 · 6 comments

Comments

@Michagogo
Copy link

It’s really great that you support LDAP for signing in with Windows Domain credentials, but that still requires that the user enter their username and password. It would be amazing if it were possible to add support to hook Wekan up with NTLM and/or Kerberos, thereby allowing the authentication to happen completely transparently from the user’s perspective.
@xet7
Copy link
Member
xet7 commented Oct 31, 2018

@Michagogo

Well, there is for example this:
https://github.com/staskorz/meteor-ntlm-example

But I have no way to test it. Someone having Windows Domain could look at it.

There is also some SAML packages here:
https://atmospherejs.com/tomwasd/flow-router-seo?q=saml

And https://sandstorm.io already has SAML, but I don't know is it possible to bypass requirement to click SAML login button.

@danpatdav
Copy link
Contributor

I would be happy to test any builds that implement Kerberos auth. I don't even think complete transparency is a requirement. Clicking a Kerberos/SPNEGO/SAML button would get me 90% of the value. We don't have passwords in our environment, so the choice is either Kerberos or maintaining local users/passwords (yuck).

@xet7
Copy link
Member
xet7 commented Dec 5, 2018

@danpatdav

One way to get Kerberos into Wekan would be that some Javascript developer in your company look at adding kerberos package:
https://www.npmjs.com/package/kerberos
and existing LDAP code in Wekan:
https://github.com/wekan/wekan-ldap

Auth0 login #1722 is coming to Wekan sometime, there is already some Meteor code in private repo that works with Auth0 and RocketChat, that needs to be cleaned up and added to Wekan. Auth0 has SAML, OAuth2 etc.

It could also help if someone would add bounty to this issue similarly like there is already for adding siteminder auth.

@danpatdav
Copy link
Contributor

After some discussions internally, the SAML route might be better for us. For those of us doing not using sandstorm, is it just a matter of incorporating the SAML packages into the edge branch?

@danpatdav
Copy link
Contributor

@xet7 I think I will just switch over to this thread, as my questions are not Kerberos\NTLM related anymore. Thanks for the advice.

#538

@xet7
Copy link
Member
xet7 commented Dec 7, 2018

Moved to SAML issue #708

@xet7 xet7 closed this as completed Dec 7, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@xet7 @Michagogo @danpatdav
0