Native LDAP Authentication with RBAC Mapping in Uyuni
This project aims to implement a native Java based LDAP authentication provider in Uyuni to eliminate dependency on OS level authentication mechanisms such as SSSD and PAM. The solution will enable administrators to configure LDAP integration directly through the web UI while supporting automatic mapping of LDAP groups to Uyuni roles. The implementation will extend the existing authentication flow by integrating LDAP authentication within UserImpl.authenticate without requiring major refactoring. It will include secure bind and search operations, efficient connection pooling, and seamless coexistence with existing local and PAM based authentication methods. Additionally, the project will introduce dynamic RBAC mapping where LDAP groups are mapped to Uyuni roles at login time, ensuring correct permissions without manual intervention. A configuration interface in the Admin Setup section will allow administrators to manage LDAP settings and role mappings easily. The final deliverable will be a scalable, maintainable, and secure authentication system that improves usability and enterprise readiness of Uyuni.
Project details
Technologies
Not listed in the archive