Organizations / groups from LDAP

[lbeltrame]

As the subject says, this would be a nice feature to have. Rationale: as I said, KDE is evaluating Gogs for its public Git infrastructure, and this is one of the features that are important. Since th number of accounts are large (1000+) the idea would be to use LDAP to get groups ("Organizations" in gogs speak) and assign people to them.

For reference, this is a feature that GitLab has, but only it its for-pay variant.

[lunny]

So we need a feature to import groups from LDAP?

[lbeltrame]

For large organizations such as KDE, yes, this is close to essential, and IMO would give a definite advantage to Gogs.

[unknwon]

What is the status of this issue?

[unknwon]

Close due to lack of feedback.

[Fnux]

I would like to re-open this issue. It would be nice to be able to sync LDAP groups with gogs organizations. I'm thinking about replacing a gitlab instance by gogs and this feature would be very useful.

[Dasoren]

@Fnux If I might ask, why would you want to replace gitlab with gogs? Not to dis gogs, love it all day long. Just wondering what your thinking is here.

[unknwon]

Thanks @Fnux !

Any idea of how to implement this?

[Fnux]

We should allow - on a specific LDAP source - to sync some groups with the local "Organizations".
A way would be to add this part in each LDAP source configuration page. You should be able to add as many "links" as you can : just two fields per "link".

• the LDAP group
• the local "Organization"

And when an user sign up using this source, gogs should check if it belongs to the specified group. If that's the case, add him to the related organization. We also have to check if the user was removed from the specified group : check once every X hours ? First login of the day ? Every login ?

Edit : + add an "enable goup sync" checkbox

Sadly, I do not have the time/knowledge to do it by myself right now. (Maybe in late January/February?)

[Fnux]

@Dasoren Well, I used GitLab a while for myself and I'm actually maintaining a GitLab instance for an association. We're in an university. We have our own LDAP, the school has its LDAP and an authentification system called "Tequila". GitLab CE allows a single LDAP server, so I had to change few things in order to allow authentification through "Tequila". It's awful to maintain (really). It takes a lot of ressources. It's way to complex.

About Gogs :

• Easy to maintain (:heart: that's the big point). No dependencies except database.
• Way more simple than the whole GitLab-sutff.
• The interface is great.
• Use something like 50 times less resources