If this plugin works with taiga6 please indicate

[karezza]

Have been working to get this to work with a taiga6 docker style installation.

Thought I saw that this was confirmed to work with taiga6 but at last check I did not see such an indication.

If this does work with taiga6 please have the version updated at the Taiga Resources page & on the github page somewhere.

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[MichaelHierweck]

There is a problem with authentication fallback to "normal" in recent Taiga versions.

Please note that the plugin tries to implement a fallback to the default authentication implementation called "normal" (FALLBACK is "normal" by default) in

taiga-contrib-ldap-auth-ext/taiga_contrib_ldap_auth_ext/services.py

Line 68 in 728f774

return get_auth_plugins()[FALLBACK]["login_func"](request)

but in recent Taiga versions get_auth_plugins() returns a dictionary with a single item "ldap" only.

Warning: Since this plugin cannot provide superusers at the moment superuser have to defined be "normal" users (e.g. the initial user). This kind of users are not able to login into recent Taiga versions any more when ldap auth is enable because the fallback implementation to "normal" users fails.

Nevertheless I wonder whether a fallback should by implemented by the plugin itself. I would suggest the core should query all registered plugins and implement multiple querying authentication providers and fallback itself.

[grab-lab]

I would love to update to Taiga6, but since LDAP breaks, that's not an option! Is there any update here?

[lknite]

I ended up using the https://github.com/robrotheram/taiga-contrib-openid-auth plugin, setting up keycloak and configuring keycloak to use ldap.

[rootbdfy]

Work fine with Taiga 6.5.1.
By the way, you can use settings/config.py instead settings/common.py. It's more convenient if you use ansible templating or something like that.
Use LDAP_USERNAME_ATTRIBUTE = 'sAMAccountName' for Active Directory.
Important:
SMTP must be properly configured.
E-mail fields of the AD account must be filled in.

@madmath03 many thanks for this plugin !

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[micw]

Hello,
I can confirm that it is actually working with Taiga 6.5.1.

• install the plug-in with PIP and add the config (we created a modified docker image for this)
• ensure that SMTP config works properly, otherwise the login fails when it tries to send the registration email
• modify the frontend config to use ldap as login

To debug if it's not working:

• set DEBUG=True to see why ldap login fails
• check the "post" request of the login that it has type "ldap"

Edit: here's my Dockerfile. It allows to set LDAP with env variables.

FROM taigaio/taiga-back:6.5.1

RUN pip install taiga-contrib-ldap-auth-ext==0.4.4
RUN sed -i /taiga-back/settings/config.py -e "s/^DEBUG = False/DEBUG = os.getenv('DEBUG', 'False') == 'True'/" && \
    echo "" >> /taiga-back/settings/config.py && \
    echo "#########################################" >> /taiga-back/settings/config.py && \
    echo "##  LDAP" >> /taiga-back/settings/config.py && \
    echo "#########################################" >> /taiga-back/settings/config.py && \
    echo "ENABLE_LDAP_AUTH = os.getenv('ENABLE_LDAP_AUTH', 'False') == 'True'" >> /taiga-back/settings/config.py && \
    echo "if ENABLE_LDAP_AUTH:" >> /taiga-back/settings/config.py && \
    echo "    INSTALLED_APPS += ["taiga_contrib_ldap_auth_ext"]" >> /taiga-back/settings/config.py && \
    echo "    LDAP_START_TLS = os.getenv('LDAP_START_TLS', 'False') == 'True'" >> /taiga-back/settings/config.py && \
    echo "    LDAP_SERVER = os.getenv('LDAP_SERVER')" >> /taiga-back/settings/config.py && \
    echo "    LDAP_PORT = int(os.getenv('LDAP_PORT','389'))" >> /taiga-back/settings/config.py && \
    echo "    LDAP_BIND_DN = os.getenv('LDAP_BIND_DN')" >> /taiga-back/settings/config.py && \
    echo "    LDAP_BIND_PASSWORD = os.getenv('LDAP_BIND_PASSWORD')" >> /taiga-back/settings/config.py && \
    echo "    LDAP_SEARCH_BASE = os.getenv('LDAP_SEARCH_BASE')" >> /taiga-back/settings/config.py && \
    echo "    LDAP_GROUP_SEARCH_BASE = os.getenv('LDAP_GROUP_SEARCH_BASE')" >> /taiga-back/settings/config.py && \
    echo "    LDAP_GROUP_ADMIN = os.getenv('LDAP_GROUP_ADMIN')" >> /taiga-back/settings/config.py && \
    echo "    LDAP_USERNAME_ATTRIBUTE = os.getenv('LDAP_USERNAME_ATTRIBUTE','uid')" >> /taiga-back/settings/config.py && \
    echo "    LDAP_EMAIL_ATTRIBUTE = os.getenv('LDAP_EMAIL_ATTRIBUTE','mail')" >> /taiga-back/settings/config.py && \
    echo "    LDAP_FULL_NAME_ATTRIBUTE = os.getenv('LDAP_FULL_NAME_ATTRIBUTE','givenName')" >> /taiga-back/settings/config.py && \
    echo "    LDAP_USER_MEMBER_ATTRIBUTE = os.getenv('LDAP_USER_MEMBER_ATTRIBUTE','memberUid')" >> /taiga-back/settings/config.py && \
    echo "    LDAP_GROUP_MEMBER_ATTRIBUTE = os.getenv('LDAP_GROUP_MEMBER_ATTRIBUTE','memberUid')" >> /taiga-back/settings/config.py && \
    echo "    LDAP_FALLBACK = os.getenv('LDAP_FALLBACK','normal')" >> /taiga-back/settings/config.py && \
    echo "    LDAP_SAVE_LOGIN_PASSWORD = os.getenv('LDAP_SAVE_LOGIN_PASSWORD', 'False') == 'True'" >> /taiga-back/settings/config.py && \
    echo "    if DEBUG:" >> /taiga-back/settings/config.py && \
    echo "        print('LDAP auth is enabled')" >> /taiga-back/settings/config.py && \
    echo "" >> /taiga-back/settings/config.py

[micw]

I made our modified docker images public at https://github.com/brick4u/taiga-pm-docker.

[madmath03]

Sorry guys, I'm not working on this anymore, so I have no idea if it still works with latest versions of Taiga.