Skip to content

[feature request] LDAP support #1290

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
ldpr opened this issue May 5, 2025 · 6 comments
Open

[feature request] LDAP support #1290

ldpr opened this issue May 5, 2025 · 6 comments

Comments

@ldpr
Copy link

ldpr commented May 5, 2025

Is your feature request related to a problem? Please describe.

There aren't many good options when it comes to opensource chat for teams. Mattermost is restricting features in favour of pushing enterprise. Zulip & rocket chat are decent alternatives. Teams & Slack are proprietary. XMPP & IRC are dated and have various drawbacks.

Describe the solution you'd like

If spacebar was able to include LDAP support it could expand the userbase beyond "just a discord alternative" to a full slack/teams alternative too. It could be great for furthering adoption among more technical people which might bring in further code contributions also.

Describe alternatives you've considered

Noted in first answer. There just aren't any "great" options in this specific space.

Additional context

Pretty please!

@MathMan05
Copy link
Contributor

what is LDAP exactly?

@Puyodead1
Copy link
Contributor

Puyodead1 commented May 6, 2025

what is LDAP exactly?

https://en.wikipedia.org/wiki/Lightweight_Directory_Access_Protocol

LDAP stands for Lightweight Directory Access Protocol, a standard application protocol for accessing and managing distributed directory services. It's used for storing and retrieving information about users, groups, devices, and other network resources, making it a crucial component for centralized user management and authentication in many enterprise environments

@ldpr
Copy link
Author

ldpr commented May 6, 2025

what is LDAP exactly?

Just to give a more everyday explanation:

It's a central store for accounts. So for example, Gitea and Nextcloud both support LDAP. If spacebar were to support it too, I could create a single account for any user on the LDAP server, hook up Gitea, Nextcloud and Spacebar to LDAP and this user could sign into any of the three services using the same set of credentials.

Gitea and Nextcloud are just two examples, I tried to pick decently popular OSS projects. It makes it a lot easier for admins, and for users to use a centralised group of services. Regarding spacebar, instead of querying it's own database for accounts, it'd query the LDAP server and if the account exists, allow the client to login.

It's somewhat close to "sign in with google" that you see on some sites if that helps.

@PhoenixSheppy
Copy link

LDAP is an excellent SSO option, although I'm not sure how integrating LDAP w/Spacebar would work, seeing as it's designed to be more of an open-registration platform for communication with friends and strangers.

I'm assuming you wouldn't want a bunch of random folk registering, and then creating users in your LDAP infrastructure lol.

@Puyodead1
Copy link
Contributor

LDAP is an excellent SSO option, although I'm not sure how integrating LDAP w/Spacebar would work, seeing as it's designed to be more of an open-registration platform for communication with friends and strangers.

I'm assuming you wouldn't want a bunch of random folk registering, and then creating users in your LDAP infrastructure lol.

Registration can be disabled in spacebar.

@ldpr
Copy link
Author

ldpr commented May 14, 2025

LDAP is an excellent SSO option, although I'm not sure how integrating LDAP w/Spacebar would work, seeing as it's designed to be more of an open-registration platform for communication with friends and strangers.
I'm assuming you wouldn't want a bunch of random folk registering, and then creating users in your LDAP infrastructure lol.

Registration can be disabled in spacebar.

This! But also with LDAP you could still allow public registration. LDAPs real power lays behind it's groups, so anyone could have a normal account and if you wanted to still keep parts section off (say for example staff only services or whatever) then normal accounts couldn't access it without being in the staff group. That's why 0days and vulnerabilities with regards to LDAP escalation (etc) are worth a lot of money. That's neither here nor there though.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants