Support for LDAP and AD Group sync

[mbuchner]

Description

Add support for LDAP and Active Directory Groups:

see: gogs/gogs#662 (comment)

Other good example is the Jenkins LDAP plugin:
https://wiki.jenkins-ci.org/display/JENKINS/LDAP+Plugin

[tboerger]

I'm missing exactly this feature now. Difficult to add users to orgs or groups if they have not been signed in at any time

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs during the next 2 weeks. Thank you for your contributions.

[divansantana]

https://github.com/tws-inc/gitea-group-sync exists.

Would be nice if it was merged upstream.

[pbodnar]

@divansantana, yes, the gitea-group-sync looks like a promising and logical approach until something better gets implemented. I. e. a cron job needs to be setup that does the following:

1. Iterate over existing Organizations and Teams.
2. For every Team, lookup matching Users via a LDAP query.
3. Add / remove corresponding Users in the Team.

For steps 1 and 3, Gitea API (RESTful services) can be used. Not sure if direct access Gitea database would be safe as well. Anyway, for bigger structures the queries to LDAP could be possibly optimized...

Any more ideas?

[Elias481]

We are also wanting this feature.
Optimally there would be a field on a team to link it to an explicit ldap group or userfilter.

Otherwise the gitea-group-sync is a quite usefull approach and would be sufficent for at least something. It should include a separate placeholder for organisation and team-name then at least.
And possibly consolidate the list of resulting queries first because I think it wil be quite common to have some same teams in different organisations.

[pgollor]

We are also wanting this feature.