Taiga 6: How to enable LDAP based login?

[ThorstenH]

Hi there!

I ugraded my Taiga 5 installation successfully to Taiga 6 now with docker containers. When I logged in with the default admin user I can see all my projects. Ok.

Now I wanted to install the LDAP support, so I first followed the instructions on:

https://taigaio.github.io/taiga-doc/dist/setup-production.html#_advanced_configuration_and_customisation

...downloaded copy of "config.py.prod.example", renamed, edited, mapped it

...same for conf.json...

Then I installed the LDAP support as described on:

https://github.com/ensky/taiga-contrib-ldap-auth

...edited the mapped config.py

...edited the mapped conf.json

...opened a console to taiga-back container and installed taiga-contrib-ldap-auth:

pip install taiga-contrib-ldap-auth

After this I did a "docker-compose down" followed by "docker-compose up -d".

Now I cannot connect to my taiga server any more. The Chrome console shows:

(index):11 GET https://mytaiga.de/v-1613134119076/styles/theme-taiga.css net::ERR_CONTENT_LENGTH_MISMATCH 200 (OK)

(index):127 GET https://mytaiga.de/v-1613134119076/js/libs.js net::ERR_CONTENT_LENGTH_MISMATCH 200 (OK)

(index):128 GET https://mytaiga.de/v-1613134119076/js/templates.js net::ERR_CONTENT_LENGTH_MISMATCH 200 (OK)

app-loader.js:1 Uncaught ReferenceError: $ is not defined

    at app-loader.js:1

    at app-loader.js:1

(anonymous) @ app-loader.js:1

(anonymous) @ app-loader.js:1

 --

Then I reverted all changes:

...unmapped the files in docker-compose.yml

...unmapped the files in docker-compose-inits.yml

restarted the containers with 

docker-compose down

docker-compose up -d

But the error persists!

How can I revert the changes? Delete the taiga-back container and docker-compose-up? Same with the front container? 

Is there an official way to enable LDAP support?

Best regards

Thorsten

 

[ThorstenH]

I could revert the changes. The problem was the multiple copies of volumes due to restarting the containers. Filled up all space...

I pruned all unused volumes an restarted the containers.

But the main question stays the same... how to enable LDAP for Taiga 6 in docker containers?

[Yamila Moreno]

Hi Thorstenh, you can extend the official image and add the ldap plugin.

```

FROM taigaio/taiga-back:latest

# your additions

```

You can check the Dockerfile in the `docker` directory to have more context.

Cheers!

--
Please help us keep the Taiga.io Community open and inclusive, follow our Code of Conduct:
https://github.com/taigaio/code-of-conduct/blob/master/CODE_OF_CONDUCT.md
---
You received this message because you are subscribed to the Google Groups "taigaio" group.
To unsubscribe from this group and stop receiving emails from it, send an email to taigaio+u...@googlegroups.com.
To view this discussion on the web, visit https://groups.google.com/d/msgid/taigaio/dbc2e2aa-41ff-4d15-9a49-e329fd597f67n%40googlegroups.com.

--

	Yamila Moreno Suárez COO & Cofounder   kaleidos.net

Este mensaje y sus archivos adjuntos van dirigidos exclusivamente a su destinatario, y pudiendo contener información confidencial sometida a secreto profesional, o cuya divulgación esté legalmente prohibida. Cualquier opinión en él contenida es exclusiva de su autor y no representa necesariamente la opinión de la empresa. Si ha recibido este mensaje por error, le rogamos nos lo comunique de forma inmediata por esta misma vía y proceda a su eliminación, así como a la de cualquier documento adjunto al mismo. El correo electrónico vía Internet no es seguro y no se puede garantizar que no haya errores ya que puede ser interceptado, modificado, perdido o destruido, o contener virus. Cualquier persona que se ponga en contacto con nosotros por correo electrónico se considerará que asume estos riesgos. KALEIDOS OPEN SOURCE se reserva las acciones legales que le correspondan contra todo tercero que acceda de forma ilegítima al contenido de cualquier mensaje externo procedente del mismo. INFORMACIÓN PROTECCIÓN DE DATOS. Responsable: KALEIDOS OPEN SOURCE (B86241973) Le informamos que sus datos identificativos y los contenidos en los correos electrónicos y ficheros adjuntos pueden ser incorporados a nuestras bases de datos con la finalidad de mantener relaciones profesionales y/o comerciales y, que serán conservados mientras se mantenga la relación. Si lo desea, puede ejercer su derecho a acceder, rectificar y suprimir sus datos y demás reconocidos normativamente dirigiéndose al correo emisor o en los datos del responsable. Para información y consultas visite nuestra web  https://kaleidos.net

[Gerrit Bonn]

Hello Yamila, thanks for chiming in on this! Would it be possible to get a step-by-step guide on how to do this on a fresh Taiga 6 installation?

[Angel Docampo]

Hello,

I'm currently stuck at Taiga 4 because it works well with my AD. I've tried last year to upgrade it to Taiga 5 but it was a hell of a mess due to OS upgrades and other stuff.

Now I see there is a proper way to install Taiga 6 with docker-compose, and I've already tested the system and imported successfully some Taiga 4 projects into Taiga 6 without any other problem than "unknown" users (obviously).

I would like to know as well how to extend the docker to add LDAP support.

I guess I need to avoid official documentation to set up Taiga with Docker, and build my image myself, but I do not even find that Dockerfile you're speaking about.

Don't really need a step-by-step, but could you please deep in your explanation?

Best

Angel

[David Barragán]

Hi Angel,

every Dokerfile is in its repository (/docker directory). For example, to add the ldap plugin you need to modify taiga-back and taiga-front Dokerfiles.

https://github.com/kaleidos-ventures/taiga-front/tree/main/docker
https://github.com/kaleidos-ventures/taiga-back/tree/main/docker

You can download (or clone and download) the repositories, apply your changes and compile the images with, for example:

cd taiga-back/
docker build --no-cache -f docker/Dockerfile -t taigaio/taiga-back-with_ldap:latest .

cd taiga-front/
docker build --no-cache -f docker/Dockerfile -t taigaio/taiga-front-with_ldap:latest .

The interesting part for your purposes is how the contribs packages are installed, with pip on taiga-back and with svn on taiga-front.

In these two directories you will find the files to manage the configuration and how to expose and read the different values from the environment variables.

I hope this information helps you.

Best regards

To view this discussion on the web, visit https://groups.google.com/d/msgid/taigaio/fb394dae-e3a8-4ad0-a0ff-def29c3670fen%40googlegroups.com.

--

	David Barragán Merino Engineer & Co-founder  kaleidos.net/FFF8E7

[Angel Docampo]

Muchísimas gracias David!

I'll try this and report back!

Best

Angel

[David Barragán]

You are welcome :-)

To view this discussion on the web, visit https://groups.google.com/d/msgid/taigaio/36a248e2-712d-4365-af23-fe9e74771f28n%40googlegroups.com.