External authentication

[richard-underwood]

Hi,

I could do with integrating the password authentication with AD (LDAP). Having a think about this, rather than integrating directly, it would be easy to set it up with an option to trust $_SERVER['REMOTE_USER'], effectively offloading the authentication to Apache. This would be the most flexible as Apache already has extensive authentication options.

Is this something you'd be interested in including, or should I keep this as a local modification?

Thanks.

[tuxis-ie]

It is far more efficient than building our own implementation. We would need to think about groups though, since that is an issue many people would want to see implemented. Any thoughts on that?

[richard-underwood]

Groups would be easier with direct LDAP integration, but I'll have a think about doing it through Apache. However, I think the first step would be to implement groups without any external integration for normal installations. I can have a go at this, if you like.

One thing, though, I have no idea how WeFact fits in with groups. I'll try and take it into account, but someone who uses it would need to test that there are no conflicts.