Cloudron Forum

@nebulon No, that's one of the major problems with semaphore. This issue is probably not related to cloudron itself, the post is like a last resort for me.

Hello everyone,

I am trying to setup ansible-semaphore using cloudron's LDAP for authentication.

By following the steps in the cloudron documentation I have reached this configuration for ansible-semaphore in the docker-compose file:

SEMAPHORE_LDAP_ACTIVATED: 'yes' # if you wish to use ldap, set to: 'yes' 
      SEMAPHORE_LDAP_HOST: XXXXXXXXXXXXX
      SEMAPHORE_LDAP_PORT: '636'
      SEMAPHORE_LDAP_NEEDTLS: 'yes'
      SEMAPHORE_LDAP_DN_BIND: 'cn=admin,ou=system,dc=cloudron'
      SEMAPHORE_LDAP_PASSWORD: 'XXXXXXXXXXXXXXXXXXXXXXXX'
      SEMAPHORE_LDAP_DN_SEARCH: 'ou=users,dc=cloudron'
      SEMAPHORE_LDAP_SEARCH_FILTER: '(\u0026(objectclass=person)(mail=%s))'

Although I get good results using ldapsearch, ldapwhoami and ansible-semaphore return

ldap_parse_result: Protocol error (2)
        additional info: 1.3.6.1.4.1.4203.1.11.3 not supported

Anyone knows what's going on?

Thanks!

@girish Yes, if we could place cloudron in the middle doing authentication it would be incredible

@girish Well, the most used setup with Loki is using it with promtail. Promtail resides in your agents and it pushes the logs to loki. Grafana then fetches the logs from loki. It's my understanding that both promtail and grafana support basic auth when interacting with loki

@doodlemania2 I have several servers that need to push logs to loki so it must be exposed to the internet and I wanted it to be secure. Protecting it with cloudron auth would make it so that loki could be exposed and not have to worry about someone fetching all my logs using loki's API

@doodlemania2 Hello, do you have any plans to add authentication to this app?

@girish Thanks for the answer! Looking forward to it

@nebulon Hello, any updates on this matter? This would be good to protect my grafana loki instance with cloudron authentication. Thanks

@girish Thank you once again

@girish Thank you! By setting the user agent to Docker-Client/20.10.12-ce (ubuntu) and using Basic Auth with my cloudron account, I can now access the registry API!

@girish yes, everything else is working as expected. Just can't seem to find any documentation that helps me in this regard.

Hello @girish, thank you for the answer.
I can login using the credentials and use it via the GUI in the browser. I just can't seem to use the registry API like http://registry/v2/_catalog/ using something like postman because I can't find a way to authenticate with cloudron

Hello, i would like to interact with the registry API but I can't seem to find a way since I'm always redirected to the login page