Uploaded image for project: 'Automation Hub'
  1. Automation Hub
  2. AAH-2112

Add FIND_GROUP_PERMS support for use in ldap

    • Icon: Story Story
    • Resolution: Done
    • Icon: Critical Critical
    • 2.3, 2.4
    • 2.3
    • None
    • False
    • Hide

      None

      Show
      None
    • False
    • ANSTRAT-423 - Direct LDAP connection from Private Hub in App without another VM being required
    • Add option to sync only existing groups from LDAP

      Feature Overview

      FIND_GROUP_PERMS strategy has never been implemented or tested with galaxy, galaxy implementation for permissions is currently based on MIRROR_GROUPS Strategy as described on
      https://galaxyng.netlify.app/integration/ldap/
      To solve that issue we might need to implement the FIND_GROUP_PERMS with the proper logic to map to RBAC roles on galaxy side and perform the testing, maybe that can be done with only settings customizations but there is a possibility that this will require more because of the specific ways the RBAC is implemented (Galaxy recently migrated from legacy roles to a new RBAC system and we need to verify how that plays with django-ldap plugin)
      At this point I say this is not yet supported, even if it works by tweaking some configuration, we need some kind of testing plan to validate it.

      Background, and strategic fit

      We have customers who need this feature as using MIRROR_GROUPS is very cumbersome.

      This feature is required for a customer rollout of our platform.

              rochacbruno@redhat.com Bruno Rocha
              rhn-support-gscarbor Gary Scarborough
              Christian Torrens Christian Torrens
              Ladislav Smola Ladislav Smola
              Votes:
              1 Vote for this issue
              Watchers:
              8 Start watching this issue

                Created:
                Updated:
                Resolved: