User authentication by HTTP header > list of user groups > change separator

[remko.g...@finalist.nl]

In SonarQube 6.2 a great new feature, 'authentication by HTTP header', is introduced.

I started testing and I found an issue with sonar.web.sso.groupsHeader

The groups returned by our IdP are separated by semi-column, but SonarQube uses the comma as separator.

Sample data list of user groups from our IdP:

memberOf: cn=sonar-administrators,ou=SonarQube,ou=Groups,dc=finalist,dc=lcl;cn=sonar-users,ou=SonarQube,ou=Groups,dc=finalist,dc=lcl

I would like to have the option sonar.web.sso.groupsSeparator

Reference: https://jira.sonarsource.com/browse/SONAR-5430

File: SsoAuthenticator.java

Line 57: private static final Splitter COMA_SPLITTER = Splitter.on(",").trimResults().omitEmptyStrings();

[Julien Lancelot]

Hi Remko,

Would it be possible to update your reverse proxy to use comma instead of semi-column ?

+++

--
You received this message because you are subscribed to the Google Groups "SonarQube" group.
To unsubscribe from this group and stop receiving emails from it, send an email to sonarqube+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/sonarqube/9c70f98e-b286-4412-8742-9e897b7743d0%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--

Julien LANCELOT | SonarSource

http://sonarsource.com

[remko.g...@finalist.nl]

Hi Julien,

The information comes from LDAP. The comma is used in the Distinguished Name itself (https://www.ldap.com/ldap-dns-and-rdns). The Distinguished Names are separated by semi-columns.
I can't change the separator to comma.

Kind regards,
Remko

Op maandag 23 januari 2017 10:03:24 UTC+1 schreef remko.g...@finalist.nl:

[Julien Lancelot]

Sorry for the late reply.

As you're using the LDAP plugin, why are you using the authentication with SSO ? 

The LDAP plugin can synchronize groups.

Thanks

--

You received this message because you are subscribed to the Google Groups "SonarQube" group.
To unsubscribe from this group and stop receiving emails from it, send an email to sonarqube+...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/sonarqube/a4bf5f84-b3c8-42ab-ac70-f32a4b6894e2%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

[remko.g...@finalist.nl]

Hi Julien,

Our prefered authentication method is SAML.

Besides that, our LDAP server is in a private domain (private Certification Authority). SonarQube is hosted elsewhere.
Because of this, it is not possible to use secure-LDAP (LDAPS or LDAP/StartTLS)

Kind regards,
Remko

Op vrijdag 27 januari 2017 15:57:10 UTC+1 schreef Julien Lancelot:

[Julien Lancelot]

Hi Remko,

Your use case makes sens, I've created a ticket to implement it : https://jira.sonarsource.com/browse/SONAR-8797.

Regards

To view this discussion on the web visit https://groups.google.com/d/msgid/sonarqube/44313ca0-ae87-4d99-a971-426d7cb84683%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.