[SAC] [OSGeo] #1824: Setup an OpenID provider using the LDAP database as input

Committees SAC mailing list
1

#1824: Setup an OpenID provider using the LDAP database as input
---------------------------+----------------------------------
Reporter: strk | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Keywords: userid, ldap, openid
---------------------------+----------------------------------
This may simplify integration of the LDAP users with other services.
Could be served by SimpleID and its LDAP plugin (PHP):
https://github.com/simpleid/simpleid-ldap

Also, it might be good to plan for "OpenID Connect" (successor of OpenID),
while still keeping the LDAP backend, for example via
https://github.com/coreos/dex

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/1824&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

2

#1824: Setup an OpenID provider using the LDAP database as input
----------------------------------+--------------------
Reporter: strk | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Resolution:
Keywords: userid, ldap, openid |
----------------------------------+--------------------

Comment (by strk):

Debian packages exist for both simpleid and its ldap backend:
https://packages.debian.org/search?keywords=simpleid

Where could I experiment installing one ?
Should it be on "secure" VM (I don't think it needs be).
Do we want to register an "id" subdomain ?

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/1824#comment:1&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.