Skip to content
This repository was archived by the owner on Mar 23, 2021. It is now read-only.

included ldap login support for webadmin - #49

Closed
twinfield (tylerwinfield) wants to merge 7 commits into
jamf:masterfrom
tylerwinfield:master
Closed

twinfield (tylerwinfield) wants to merge 7 commits into
jamf:masterfrom
tylerwinfield:master

Conversation

@tylerwinfield

Copy link
Copy Markdown

updated installation script to install ldap module for php
added support for ldap logins to webadmin
redesigned lookup process to improve security

tylerwinfield added 6 commits November 20, 2014 15:24
added installation of php ldap module to required software installs
included login support for ldap accounts
created ldap configuration page under webadmin settings
included support to purge all deprecated updates from SUS
added button for update purge to webadmin
included functions for purging of deprecated updates
added button to webadmin for purge function
store username as session variable
display function returns session username first if it is set
@nicolasbrechet

Copy link
Copy Markdown

Hi,

👍

Is there any plans on merging this ?

With ChrOst@ff6dc03 for Active Directory login, it would be awesome!

Thanks!

@duel007

duel007 commented May 5, 2015

Copy link
Copy Markdown
Contributor

Nicolas Brechet (@nicolasbrechet) Jamf (@jamf)

It seems that ChrOst (@ChrOst) has made the changes requested by Jamf (@jamf) here: #14 (comment)

Thoughts on a merge? Would be wonderful.

extra "=" symbol crashing PHP
@StevenStrand

Copy link
Copy Markdown
Contributor

There are currently some merge conflicts but upon resolution of these conflicts we will merge.

@cvgs

Copy link
Copy Markdown

Why not verify the user against the JSS API? Then you would not have to re-enter all the LDAP information?

@ChrOst

Copy link
Copy Markdown

Christoph von Gabler-Sahm (@cvgs) and what do you find a valid login if you run multiple sites with different AdminGroups?

@cvgs

Copy link
Copy Markdown

ChrOst (@ChrOst) You would have to not only check the login credentials, but also evaluate the user’s granular permissions and then "hijack" an existing permission for indirect verification.
Like when the user is allowed to create/update/delete "Software Update Servers" (or "Policies", or "Configurations" - the idea is to pick something that is equally powerful or destructive as managing the NetSUS), he probably should also be allowed to configure the NetSUS. And the JSS API might be accessible in more setups than an LDAP server (e.g. it is even active on an Limited JSS) and could be queried via the Internet, if the setup is designed for this.
But that was just a thought in the back of my head; i'm sure LDAP is also fine. This would just be a nice close integration of the appliance and the rest of the JSS.

@StevenStrand

Copy link
Copy Markdown
Contributor

This has been implemented with the new UI.

@jelockwood

Copy link
Copy Markdown

Steven Strand (@StevenStrand)
I have just upgraded to NetSUS 5.0 which is supposed to include this new LDAP support. However the webadmin user interface is still only showing Active Directory options and no LDAP options.

What am I missing? I am running NetSUS 5.0 on Ubuntu 16.04.

screen shot 2018-10-01 at 10 40 27

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants