-
Story
-
Resolution: Done
-
Critical
-
2.3
-
None
-
False
-
-
False
-
ANSTRAT-423 - Direct LDAP connection from Private Hub in App without another VM being required
-
Add option to sync only existing groups from LDAP
-
-
-
Feature Overview
FIND_GROUP_PERMS strategy has never been implemented or tested with galaxy, galaxy implementation for permissions is currently based on MIRROR_GROUPS Strategy as described on
https://galaxyng.netlify.app/integration/ldap/
To solve that issue we might need to implement the FIND_GROUP_PERMS with the proper logic to map to RBAC roles on galaxy side and perform the testing, maybe that can be done with only settings customizations but there is a possibility that this will require more because of the specific ways the RBAC is implemented (Galaxy recently migrated from legacy roles to a new RBAC system and we need to verify how that plays with django-ldap plugin)
At this point I say this is not yet supported, even if it works by tweaking some configuration, we need some kind of testing plan to validate it.
Background, and strategic fit
We have customers who need this feature as using MIRROR_GROUPS is very cumbersome.
This feature is required for a customer rollout of our platform.