Use Keycloak or Authentik (with LDAP plugins)

dragongoose commented

2023-06-18 18:13:48 +00:00

The current LDAP server solution seems to keep having reoccuring issues with managing permissions, and nobody here really knowing how it's permissions work.

Switching to Authentik or Keycloak could help solve this issues!

Would this be a viable option?

The current LDAP server solution seems to keep having reoccuring issues with managing permissions, and nobody here really knowing how it's permissions work. Switching to [Authentik](https://goauthentik.io/) or [Keycloak](https://www.keycloak.org/) could help solve this issues! Would this be a viable option?

a added the

enhancement

label 2023-06-18 18:56:45 +00:00

a commented

2023-06-18 18:57:12 +00:00

Owner

I've considered this before (in fact we used Keycloak around 2 years ago for a while), but it would require quite a bit of work to switch to a different auth server and reconfigure everything to use the new service. The current LDAP setup can be annoying, but it does work and I think this is a "don't fix it if it's not broken" situation. I'd say I'm fairly knowledgeable about OpenLDAP and permissions and stuff, and I also wrote some scripts (adduser, moduser, deluser) to simplify managing the LDAP server so it's really not that bad. Of course, if I had to redo everything, I'd probably not use OpenLDAP, but I think it's too late to switch now.

a closed this issue

2023-06-18 18:57:12 +00:00

dragongoose commented

2023-06-18 19:09:38 +00:00

Author

Ah, that makes sense

👍 1

Use Keycloak or Authentik (with LDAP plugins) #205