starred/netbox
1
0
Fork 0
mirror of https://github.com/netbox-community/netbox.git synced 2026-01-11 21:10:29 +01:00
Code Issues 273 Packages Projects Releases 10 Wiki Activity

Move LDAP authentication into a standalone authentication backend #3465

New Issue
Closed
opened 2025-12-29 18:29:21 +01:00 by adam · 5 comments
adam commented 2025-12-29 18:29:21 +01:00
Owner
Copy Link

Originally created by @jeremystretch on GitHub (Mar 11, 2020).

Originally assigned to: @jeremystretch on GitHub.

Proposed Changes

With the introduction of support for custom authentication backends (#2328) in NetBox v2.8, it no longer makes sense to maintain LDAP authentication as part of NetBox's core.

Justification

Offloading this functionality removes the burden of maintenance from the core maintainers, encourages more community participation in the development of the LDAP backend itself, and should serve as a strong reference implementation for custom authentication backends. It will also help guide the development of remote authentication support in NetBox.

Originally created by @jeremystretch on GitHub (Mar 11, 2020). Originally assigned to: @jeremystretch on GitHub. ### Proposed Changes With the introduction of support for custom authentication backends (#2328) in NetBox v2.8, it no longer makes sense to maintain LDAP authentication as part of NetBox's core. ### Justification Offloading this functionality removes the burden of maintenance from the core maintainers, encourages more community participation in the development of the LDAP backend itself, and should serve as a strong reference implementation for custom authentication backends. It will also help guide the development of remote authentication support in NetBox.
adam added the status: acceptedtype: deprecation labels 2025-12-29 18:29:21 +01:00
adam closed this issue 2025-12-29 18:29:21 +01:00
adam commented 2025-12-29 18:29:21 +01:00
Author
Owner
Copy Link

@bluikko commented on GitHub (Apr 14, 2020):

I'll repeat here that it would be nice if the LDAP module could also be used as an authorization module when external authentication is used. I don't know how doable/complex that would be.

After authentication is completed externally the user's group memberships are read from LDAP for permissions.

@bluikko commented on GitHub (Apr 14, 2020): I'll repeat here that it would be nice if the LDAP module could also be used as an authorization module when external authentication is used. I don't know how doable/complex that would be. After authentication is completed externally the user's group memberships are read from LDAP for permissions.
adam commented 2025-12-29 18:29:21 +01:00
Author
Owner
Copy Link

@jeremystretch commented on GitHub (Apr 14, 2020):

@bluikko That is beyond the scope of this issue.

@jeremystretch commented on GitHub (Apr 14, 2020): @bluikko That is beyond the scope of this issue.
adam commented 2025-12-29 18:29:22 +01:00
Author
Owner
Copy Link

@Haeki commented on GitHub (May 6, 2020):

Since its possible to using an LDAP backend as custom authentication backend thats seems like a good idea.
A Problem could be if someone wants to use both ldap and another custom authentication backend. A possible solution would be to allow the use of more than one custom backend.

@Haeki commented on GitHub (May 6, 2020): Since its possible to using an LDAP backend as custom authentication backend thats seems like a good idea. A Problem could be if someone wants to use both ldap and another custom authentication backend. A possible solution would be to allow the use of more than one custom backend.
adam commented 2025-12-29 18:29:22 +01:00
Author
Owner
Copy Link

@Dimaqa commented on GitHub (Jul 20, 2020):

I believe you need to add REMOTE_AUTH_CONFIG now, because there is no way to specify LDAP config other than in settings.py. Or am i missing something?

@Dimaqa commented on GitHub (Jul 20, 2020): I believe you need to add REMOTE_AUTH_CONFIG now, because there is no way to specify LDAP config other than in settings.py. Or am i missing something?
adam commented 2025-12-29 18:29:22 +01:00
Author
Owner
Copy Link

@sly-net commented on GitHub (Aug 14, 2020):

I'll repeat here that it would be nice if the LDAP module could also be used as an authorization module when external authentication is used. I don't know how doable/complex that would be.

After authentication is completed externally the user's group memberships are read from LDAP for permissions.

@bluikko I've made a proof of concept of this. Check it out here: https://github.com/sly-net/netbox-remote-authn-ldap-authz

@sly-net commented on GitHub (Aug 14, 2020): > I'll repeat here that it would be nice if the LDAP module could also be used as an authorization module when external authentication is used. I don't know how doable/complex that would be. > > After authentication is completed externally the user's group memberships are read from LDAP for permissions. @bluikko I've made a proof of concept of this. Check it out here: https://github.com/sly-net/netbox-remote-authn-ldap-authz
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
beta
breaking change
complexity: high
complexity: low
complexity: medium
needs milestone
netbox
pending closure
plugin candidate
pull-request
Mirrored from GitHub Pull Request
 severity: high
severity: low
severity: medium
status: accepted
status: backlog
status: blocked
status: duplicate
status: needs owner
status: needs triage
status: revisions needed
status: under review
topic: GraphQL
topic: Internationalization
topic: OpenAPI
topic: UI/UX
topic: cabling
topic: event rules
topic: htmx navigation
topic: industrialization
topic: migrations
topic: plugins
topic: scripts
topic: templating
topic: testing
type: bug
type: deprecation
type: documentation
type: feature
type: housekeeping
type: translation
No Label status: accepted type: deprecation
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
adam
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/netbox#3465
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?