Re: [pve-devel] [PATCH] [PATCH pve-access-control] SSO feature: login with SAMLv2

2021-06-01 Thread Dietmar Maurer
Unfortunately, your code depends on code not packaged for Debian. Any idea how to replace that (cpanm Net::SAML2)? Or better, is there a 'rust' implementaion for SAML2? If so, we could make perl bindings for that and reuse the code with Proxmox Backup Server. Other ideas? > diff --git

Re: [pve-devel] [PATCH] [PATCH pve-access-control] SSO feature: login with SAMLv2

2021-06-01 Thread Dietmar Maurer
I wonder why you want to store temporary data in /etc/pve/tmp/saml. Wouldn't it we good enough to store that on the local file system? > On 05/27/2021 11:55 PM Julien BLAIS wrote: > > > Added a new endpoint usable by api2/html/access/saml?realm=$DOM > which allows to initiate a redirection

Re: [pve-devel] [PATCH] [PATCH pve-access-control] SSO feature: login with SAMLv2

2021-05-28 Thread Thomas Lamprecht
Hi! Thanks for sending this as patch series, looks much nicer to review now! It seems that a signed CLA from you is still missing though, please check out: https://pve.proxmox.com/wiki/Developer_Documentation#Software_License_and_Copyright Would be great if you could send one to

[pve-devel] [PATCH] [PATCH pve-access-control] SSO feature: login with SAMLv2

2021-05-27 Thread Julien BLAIS
Added a new endpoint usable by api2/html/access/saml?realm=$DOM which allows to initiate a redirection to an IdP. During initialization, the /etc/pve/tmp/saml file is filled with the format REALM:SAML_REQUEST_ID:TIME Modification of the endpoint /access/ticket to support SAMLResponse. The