Grant admin based on group member in LDAP Autthenication #6474

New Issue

GiteaMirror · 2025-11-02T06:57:05-06:00

GiteaMirror commented

2025-11-02 06:57:05 -06:00

Originally created by @badjman on GitHub (Dec 6, 2020).

Gitea version (or commit ref): 1.30.0
Git version: N/A
Operating system:
N/A
Database (use [x]):
- PostgreSQL
- MySQL
- MSSQL
- SQLite
Can you reproduce the bug at https://try.gitea.io:
- N/A
- Yes (provide example URL)
- No
Log gist:
N/A

Description

It would be nice to extend the "Verify Group Membership" option in LDAP Authentication to allow for us to search for Group Member for Admins. IE;

dc=test,dc=local
- ou=Groups
  - cn=admin
  - cn=user
- ou=Users
  - cn=Admin
  - cn=User

Admin is apart of the admin group,
User is apart of the user group.

Admin has site admin privileges, whereas users only have user privilege.
This could be also useful to extend it on restricted and disabled users.

Screenshots

N/A

Originally created by @badjman on GitHub (Dec 6, 2020).   - Gitea version (or commit ref): 1.30.0 - Git version: N/A - Operating system: N/A - Database (use `[x]`): - [x] PostgreSQL - [ ] MySQL - [ ] MSSQL - [ ] SQLite - Can you reproduce the bug at https://try.gitea.io: - [x] N/A - [ ] Yes (provide example URL) - [ ] No - Log gist: N/A ## Description It would be nice to extend the "Verify Group Membership" option in LDAP Authentication to allow for us to search for Group Member for Admins. IE; - dc=test,dc=local - ou=Groups - cn=admin - cn=user - ou=Users - cn=Admin - cn=User Admin is apart of the admin group, User is apart of the user group. Admin has site admin privileges, whereas users only have user privilege. This could be also useful to extend it on restricted and disabled users. ## Screenshots N/A

GiteaMirror added the type/feature type/proposal topic/authentication labels 2025-11-02 06:57:05 -06:00

GiteaMirror closed this issue

2025-11-02 06:57:05 -06:00

GiteaMirror commented

2025-11-02 06:57:05 -06:00

@zeripath commented on GitHub (Dec 7, 2020):

Can't you use the admin filter?

@zeripath commented on GitHub (Dec 7, 2020): Can't you use the admin filter?

GiteaMirror commented

2025-11-02 06:57:06 -06:00

@badjman commented on GitHub (Dec 13, 2020):

The admin filter, if I understood the documentation correctly, only looks at the users attributes, not looking through groups for a matching user.

@badjman commented on GitHub (Dec 13, 2020): The admin filter, if I understood the documentation correctly, only looks at the users attributes, not looking through groups for a matching user.

GiteaMirror commented

2025-11-02 06:57:06 -06:00

@wxiaoguang commented on GitHub (Apr 14, 2022):

Now there is a group mapping feature.

@wxiaoguang commented on GitHub (Apr 14, 2022): Now there is a group mapping feature.

GiteaMirror commented

2025-11-02 06:57:06 -06:00

@wxiaoguang commented on GitHub (Apr 16, 2022):

The admin filter should work. You can use the filter to match the group

@wxiaoguang commented on GitHub (Apr 16, 2022): ![image](https://user-images.githubusercontent.com/2114189/163669094-833d1b93-c886-4815-9901-9071365e7368.png) The admin filter should work. You can use the filter to match the group

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/gitea#6474