Edit provider configuration from interface

[lucagasparini]

When configuring an external AD/LDAP provider, it may be necessary to intervene to change some parameters (TLS, Bind DN, Bind password, IP and remote server port).
Currently the interface does not allow these changes:

Proposed solution

I propose to add a kebab menu to be able to change one or more parameters of the configuration.

See also

• Discussion https://mattermost.nethesis.it/nethesis/pl/jwefojag57riudpp69ifwi1wiy

[DavidePrincipi]

I propose to add a kebab menu to be able to change one or more parameters of the configuration.

The kebab idea is not bad, but after a discussion with @AmaLuci and @andre8244, we'd also add a title for the card: Domain settings. We can use the same style adopted by Mail > Filter (see General card in the screenshot) the Nodes page.

In summary on the Frontend side:

1. Add Domain settings to the UI card, use a Gear-icon

2. Apply centered alignment to card contents

3. Add kebab menu, with "Edit external domain" action

4. Open a modal dialog with title "Edit external domain", to edit some fields:

   • Bind DN
   • Password
   • TLS
   • TLS verification

   Other settings must not be visible.

On the backend side,

• The "Edit settings" dialog requires a new alter-external-domain cluster action.
• The action writes the new configuration in Redis and PUBLISHes a user-domain-changed event. See also https://nethserver.github.io/ns8-core/core/events/
• As the TLS settings must be propagated to Ldapproxy-es, PUBLISHing ldap-provider-changed is probably needed too.
• The action must validate the new parameters before applying them.

[stephdl]

QA

version to test : ghcr.io/nethserver/core:3.5.0-dev.3

verify the feature is workable

case 1

• set an external ldap provider
• change the settings and verify that you have the error if the settings are not good

case 2

• set an external ldap provider with tls verify enabled
• if enabled the button to add a new provider is disabled
• if you have some providers, the toggle to enable tls verify is disabled

case 3

• set an external ldap account provider
• the password is hidden like any password input field