Integrate LDAP support (now supported by Pixelfed)

[chbmeyer]

Describe the bug

Pixelfed for Yunohost doesn't allow SSO-users to log in.
On the other hand everyone can register to Pixelfed as long as a valid mailadress is given.

I found that Pixelfed is able to use LDAP-SSO
https://docs.pixelfed.org/running-pixelfed/ldap-authentication.html
and there is a valid LDAP configuration for PeerTube:
https://github.com/YunoHost-Apps/peertube_ynh#plugins

To enable LDAP authentication open https://my.peertube.domain/admin/plugins/show/peertube-plugin-auth-ldap
Complete with the following informations :
- URL: ldap://127.0.0.1
- Insecure TLS : checked
- Search base : ou=users,dc=yunohost,dc=org
All YunoHost users will be allowed to login as peertube user.

Is it possible to add support for yunohost-LDAP in Pixelfed, too?

Context

• Hardware: *VPS bought online *
• YunoHost version: 4.3.6.3 (stable)
• I have access to my server: Through SSH | through the webadmin | ...
• Are you in a special context or did you perform some particular tweaking on your YunoHost instance?: no
• Using, or trying to install package version/branch: 0.11.2~ynh1

Thanks a lot Christian Meyer

[lapineige]

Indeed LDAP support was recently introduced in Pixelfed : pixelfed/pixelfed#3296
But it is not yet available for Yunohost, as no new Pixelfed version was released since that addition.
Thank you for pointing to the documentation by the way.

However yes it is possible to integrate it (once a new Pixelfed version is released). It just need… someone to tackle that work 🙂
I have no time to work on this.

And it looks awfully complex to be honest 😅 (I did hope for a simple option to activate and a few configuration steps, not to have to edit a bunch of files).
Also we will have to manage accounts created before LDAP integration, I don't know if both can coexist.

So any help would be very much appreciated… 🙏

[lapineige]

#176 Will allow to start working on LDAP support… but we will need some help, for my part I'm not competent to work on this 😅