Project

General

Profile

Actions
Copy link

Feature #1300

closed

Foreman should support HTTP Authentification

Added by Romain Vrignaud over 12 years ago. Updated over 12 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Romain Vrignaud
Category:
Authentication
Target version:
1.0
Difficulty:
Triaged:
Bugzilla link:
Pull request:
Fixed in Releases:
Found in Releases:
Red Hat JIRA:

Description

Hello,

It would be great to allow HTTP Authentification in Foreman
(for instance to allow things like WebSSO with LemonLDAP::NG).

Thx in advance.

Files

0001-Fixes-1300-with-REMOTE_USER-support.patch 0001-Fixes-1300-with-REMOTE_USER-support.patch 1.37 KB Romain Vrignaud, 11/15/2011 11:18 AM
0001-fixes-1300-with-REMOTE_USER-support.patch 0001-fixes-1300-with-REMOTE_USER-support.patch 1.41 KB Romain Vrignaud, 11/15/2011 12:00 PM
apache-auth.patch apache-auth.patch 1.86 KB Romain Vrignaud, 12/19/2011 08:37 AM
0001-fixes-1300-Add-support-of-HTTP-Auth-with-REMOTE_USER.patch 0001-fixes-1300-Add-support-of-HTTP-Auth-with-REMOTE_USER.patch 2.27 KB Romain Vrignaud, 12/19/2011 08:44 AM

Related issues 2 (0 open — 2 closed)

Has duplicate Foreman - Feature #1369: Support Apache Basic Authentication for SSO.ClosedOhad Levy12/05/2011Actions
Is duplicate of Foreman - Bug #907: Foreman behind apache with userauth.Duplicate05/17/2011Actions
Actions
Copy link
 #1

Updated by Romain Vrignaud over 12 years ago

  • Assignee set to Romain Vrignaud
Actions
Copy link
 #3

Updated by Ken Barber over 12 years ago

I've tested this patch on 0.4 and it seems to work sufficiently okay. The edge cases aren't covered such as:

  • If the auth succeeds but the user doesn't exist, the error is not graceful.
  • It may be that someone wants the user to get created in the case of a user not existing in the INTERNAL_DATABASE.

Otherwise its a great start. Thanks Romain :-).

settings.yaml:

---
    :login: true
    :authorize_login_delegation: true

Sample apache config:

<VirtualHost *:80>
    ServerName foreman1.vm
    ServerAdmin 
    DocumentRoot /usr/share/foreman/public
    Railsautodetect on
<Location />
    AuthType Basic
    AuthName "Restricted Files" 
    AuthUserFile /etc/httpd/auth.pwd
    Require Valid-User
    </Location>
    </VirtualHost>
Actions
Copy link
 #4

Updated by Romain Vrignaud over 12 years ago

New patch to handle case when user is not found.

Actions
Copy link
 #5

Updated by Romain Vrignaud over 12 years ago

Update patch to support WUI settings.

Actions
Copy link
 #7

Updated by Ohad Levy over 12 years ago

  • Category set to Authentication
  • Target version set to 1.0
Actions
Copy link
 #8

Updated by Anonymous over 12 years ago

  • Status changed from New to Closed
  • % Done changed from 0 to 100
Actions
Copy link

Also available in: Atom PDF