Status LDAP integration?

[nebulon]

We managed to come up with a fix and they have released a new LDAP plugin already which is now compatible.

I am currently fixing up the autoconfiguration and then we can enable optional LDAP support in the package. Of course though this is then a bit special, since installing the app with user management integration also means one has to purchase the FreeScout LDAP plugin afterwards.
I don't think we have any app in our library following that approach for the moment.

[girish]

@nebulon Do freescout plugins work with a license key? If so, is the idea to install with Cloudron authentication and then make the user put in license key for things to start working? Or is it that we cannot put the code at all in the docker image?

Also, the closest we have like this is Confluence.

[marcusquinn]

@girish Yup, 32 varchar licence keys (as opposed to licence files).

[subven]

@girish basically yes. You can only install an module if you have the license key for it. The env's used by an module can be stored in configuration files beforehand. Usage is therefore opt-in and does not affect normal cloudron users without a license.

I like their concept and price model very much and it was easy for me to buy a few (lifetime) module licenses.

[nebulon]

Since I kind of got stuck eventually somewhere in the auth framework, of which I am no expert, we have provided the freescout team a Cloudron to be able to reproduce the login issue.

They have managed to fix this upstream, so I am trying to work out how we can test this with maybe a test license for package updates...once that is resolved we can finally push a package which supports LDAP

[nebulon]

We have published a new app package now, which contains the LDAP fixes.
The app can be installed with cloudron usermanagement now, however that feature only works if the Freescout LDAP module is also purchased. Once it is activated, just restart the app and it should work.

In order to use this, a fresh FreeScout instance has to be installed!

[imc67]

@nebulon this is very good news! Do you have any advice how to migrate an existing app?

[nebulon]

Unfortunately not really. I guess you could try to update your existing, then install a new instance and import a backup from the other into that.
I am not sure though what really happens if user account emails would clash between old and LDAP users in Freescout.

[girish]

@nebulon would be great to migrate our freescout instance also!

[imc67]

@girish said in Status LDAP integration?:

@nebulon would be great to migrate our freescout instance also!

I think I wait with ours until you have experienced

[nebulon]

Alright, we managed to migrate our own instance now. Freescout matches users by email, so it would merge the user profiles from LDAP and built-in. The process is as follows:

1. update your current instance to latest version
2. install LDAP module and activate on old version (if not done already, this can also be done later but since the license key does not work multiple times, this is the safer option)
3. create a fresh backup after LDAP module activation
4. Install a fresh FreeScout app instance on your Cloudron
5. Import the latest backup of your old installation into this app
6. Login to new app and verify things are working
7. You can now uninstall the old app instance and probably relocate the new one to the old domain

[imc67]

@nebulon this is as usual excellent news and way of working in Cloudron!

Tomorrow morning I’ll migrate two instances!

[humptydumpty]

Would the 2FA carry over through LDAP if i switch my freescout instance over to the new version or do I also need to get the freescout 2FA module?

[girish]

This post is deleted!