Tuleap LDAP features:
Read-only use of an Active Directory (AD). Tuleap must be configurable to work with either openLDAP or AD. Plenty of other tools have this compatibility (e.g. Jenkins/ Bugzilla) and are a good source of inspiration for configuration examples and explanations.
The following must all work with an AD.
- Account creation (already works, verify)
- Login (already works, verify)
- Auto provisionning (already works, verify)
- Automatic creation of Tuleap user account when user exists in AD but not yet in Tuleap user DB
- Autocompletion
- SVN authentication
- through Apache via svn CLI commands
- through viewVC in UI
- through custom perl/ python scripts (nightly stats, notifications/ commit-email.pl)
- Import LDAP group (for project_members and for static ugroups)
- be careful with group structure difference between openLDAP and AD
- Update LDAP group (for project_members and for static ugroups) on Tuleap (user-group LDAP binding)
- Nightly synchro is covered by story #8208 (extracted to fit team constraint)
In addition to features:
- Update documentation to explain how AD integration works. Maybe provide 2 ldap.inc, one for openldap like and one for AD.
- Update validation suite to cover AD. Must test valid users and groups as well as invalid users and groups (user doesn't exist/ invalid credentials/ user group doesn't have correct permissions/ ...)
Technical note: