LDAP authentication

[peelman]

Let somebody else handle password hashing and storage.

Might not be feasible with Sentry, I'm not familiar enough with it to know how flexible it is. Rudimentary research shows others have forked it to add support for LDAP with mixed results.

phpipam uses adLDAP with great success (was the easiest AD integration I have ever experienced with a php app).

Awesome work so far! Let me dig in a little deeper and I hope to contribute and not just gripe about complicated stuff!

This might be another option.

[snipe]

Definitely a good one on for the list! I absolutely want/NEED this as well.

[peelman]

so apparently adldap is already a composer package. i just spent about 30 minutes on it via ldap-auth, but didn't get anywhere substantial. Still not familiar enough with lavarel, sentry, etc., to really have an affect here...

[abrahamvegh]

+1

[technogenus]

Our team will definitely be working on LDAP integration which will mean getting rid of Sentry. We will likely need to move away from Sentry anyway due to the corp. branding of this package to "Sentinel" and we also discovered LOTS of bugs in the internal call/returns which makes some of elements of the current version unfixable unless we rewrite portions of Sentry (i.e. the Unhandled Exception when you try to view deleted users).

[snipe]

I'm not sure that I agree with this path, but am open to discussion. We can talk more when I get back from Vegas on Tuesday tho.

[mnonnenmacher]

👍

I have found a fork of sentry that adds LDAP support, maybe it's worth a look when you are working on LDAP integration: https://github.com/anndro/SentryLdap

Do you have any plans on when you will implement this feature? I'm really looking forward to it :)

[chadleeshaw]

Is LDAP Authentication now possible, I just see the label ready? I'd like to be able to use LDAP Authentication to login and assign users from LDAP to assets. If this is possible how do I implement?

[snipe]

It is not implemented yet.

[chadleeshaw]

Any rough idea on a date to be implemented :)

[rp-tech]

+1 for LDAP can't wait for this feature!

[Deathomen]

Can we get an ETA on when this should be included? I'm very anxious for this.

[snipe]

I don't currently have an LDAP setup to be able to work on this. If anyone else does I'll gladly accept pull requests on it.

[snipe]

Test server here may work for anyone looking to work on this feature: http://www.forumsys.com/tutorials/integration-how-to/ldap/online-ldap-test-server/

[vabue]

Looking for this feature too.

[TheLilleorg]

Would love to see this feature rolled out.

Tested it with sentry but found the configurations too unfamiliar to my liking.
Found another plugin to try : http://packalyst.com/packages/package/wells/l4-ldap-ntlm

The setup was rather easy considering.

My issue was I could see that snipe-IT was communicating with the server (had to remove the @ from the vendor package to work with my openldap setup) user was able to bind to the ldap server.

Couldn't get further.

[rp-tech]

Call me crazy but have you guys ever considered partnering this with another FOSS project - check out OsTicket; I absolutely love their software and I am planning to use it alongside Snipe - if these 2 projects somehow worked together to create an integrated ticketing and asset management system, it would absolutely destroy the competition in many ways!

The reason I am bringing this up is because they have quite a mature development team over there, and their LDAP integration is already implemented and working well - perhaps they would be willing to share some of that information with another great FOSS team and help bring the cost of IT within reach for small providers!

[ippup]

Any word on when we can expect an LDAP integration option?

This is the only thing stopping me from deploying snipeit

Aside from this single requirement, I believe its the best asset management software for SME on the market.

[brusch]

• 1

[hughevans]

I notice both this and SAML are tagged for v3.0. I would contest that only SAML is required. Everyone is seemingly moving in that direction and it isn’t hard to set up an IdP that works with AD such as ADFS.

[snipe]

@hughevans - agreed

[misilot]

What about people that don't have AD, and just have LDAP?

[hughevans]

You could try SimpleSAMLphp.