[Implemented] Secure external authentication

[tommyd]

Please implement any kind of secure external authentication (Active Directory) witch does not require reversible passwords:
radius with mschap v2
ldaps
pam

[Tomas]

Direct LDAP integration is on the Roadmap, and it will include LDAPS.

We are hoping to release that around August this year.

[tommyd]

Direct LDAP integration is on the Roadmap, and it will include LDAPS.

great, we just bought 120 device license and managing account for 20 person team manually isn't fun

[Confab]

Also looking forward an LDAP integration!

[edward.fingleton]

Has this been implemented yet? I can't find the option.

[smccloud]

Is this still being worked on? Radius with PAP or CHAP is not a viable option for us. Cleartext password transmission over the network will not work and storing the passwords in AD using reversible encryption will not work either.

[Tomas]

Is this still being worked on?

This is actively worked on. Release target for LDAP is 2.3.0.

[Tomas]

With release of 2.3.0 which includes support for LDAPS and LDAP with StartTLS, I am marking this topic as "[Implemented]"

[ktkintner]

Can you add the ability to use a filter with LDAP authentication? Just using a base DN isn't sufficient for all organizations, being able to use a filter to specify things like being a member of a group would be very helpful.

[Vik@Unimus]

This is a useful feature. We have created an internal ticket to investigate options to add filtering to requests. When I have some more information to share, I will update the thread.