Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-16299

Add groups to reverse proxy auth

    XMLWordPrintable

    Details

    • Similar Issues:

      Description

      Add the ability to choose an HTTP header to pass groups informations related to the user. so w'll have on header for the user id and one (optionnal) for group(s) info. (coma separated fro ex.)

      An other possibility could be to allow to combine reverse-proxy-auth (for user identification) and a script from script-security-realm to get only the groups of the user.

        Attachments

          Activity

          Hide
          facq Laurent FACQ added a comment -

          i wrote a patch to implement this feature

          https://github.com/facq/reverse-proxy-auth-plugin.git

          Show
          facq Laurent FACQ added a comment - i wrote a patch to implement this feature https://github.com/facq/reverse-proxy-auth-plugin.git
          Hide
          wilder_rodrigues Wilder Rodrigues added a comment -

          Hi,

          The one above does not really do the work properly. We have extended the Reverse Proxy Auth plugin in order to also get the LDAP groups on the header.

          It works like a charm along with Role-based matrix

          https://github.com/schubergphilis/reverse-proxy-auth-plugin

          For now, in order to use this fork, you will need to inform the header fields and have some data there, otherwise the user is not authenticated. I will change it in order to make the header groups optional.

          Cheers,
          Wilder

          Show
          wilder_rodrigues Wilder Rodrigues added a comment - Hi, The one above does not really do the work properly. We have extended the Reverse Proxy Auth plugin in order to also get the LDAP groups on the header. It works like a charm along with Role-based matrix https://github.com/schubergphilis/reverse-proxy-auth-plugin For now, in order to use this fork, you will need to inform the header fields and have some data there, otherwise the user is not authenticated. I will change it in order to make the header groups optional. Cheers, Wilder
          Show
          wilder_rodrigues Wilder Rodrigues added a comment - It has been released: https://wiki.jenkins-ci.org/display/JENKINS/Reverse+Proxy+Auth+Plugin
          Show
          wilder_rodrigues Wilder Rodrigues added a comment - https://wiki.jenkins-ci.org/display/JENKINS/Reverse+Proxy+Auth+Plugin

            People

            Assignee:
            wilder_rodrigues Wilder Rodrigues
            Reporter:
            facq Laurent FACQ
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: