Skip to content
GitLab
Projects Groups Topics Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
  • fusiondirectory-orchestrator fusiondirectory-orchestrator
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributor statistics
    • Graph
    • Compare revisions
  • Issues 20
    • Issues 20
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 1
    • Merge requests 1
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Wiki
    • Wiki
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • fusiondirectoryfusiondirectory
  • fusiondirectory-orchestratorfusiondirectory-orchestrator
  • Issues
  • #96
Closed
Open
Issue created May 14, 2025 by bmortier@bmortierMaintainer

the concept of authentification to orchestrator server and token retrieval should be redone

Hello,

The concept of authentication and token retrieval is too complicated and must be rewritten

for now, we have :

  • ldap bind with user / password on the server
  • restriction on a specific dsa branch
  • reconstruction of full dn and adding some part or removing some part

that's way too complicated

  • the function authenticateDSA and getDSAInfo should be completely redone and reamed authenticate and getInformation (maybe a better name that explains what it is doing)

We should have only one full dn that is the one used to connect to the orchestrator server.

Example : cn=orchestrator,ou=dsa,dc=test-fusiondirectory,dc=org

The account used for all operation becomes the dn mentioned into LDAP_BIND_DN

⚠ please note that the branch could be anything, so the search for the user should be done on the full dn.

removal

ORCHESTRATOR_ACCOUNT_BRANCH="ou=dsa,dc=test-fusiondirectory,dc=org"

Assignee
Assign to
Time tracking