Simple OAuth2/OpenID Connect server based upon LDAP
Project description
⚠ Canaille is under development. Do not use in production yet. ⚠
Canaille
Canaille is a French word meaning rascal, and is pronounced approximatively Can I?, as in Can I access this data please?. It is a simple OpenID Connect provider based upon OpenLDAP.
It aims to be very light, simple to install and simple to maintain. Its main features are :
- OAuth/OpenID Connect support;
- Authentication against a LDAP directory;
- No additional database required. Everything is stored in your OpenLDAP server;
- The code is easy to read and easy to edit in case you want to write a patch.
Install
First you need to install the schemas into your LDAP server. There are several ways to achieve this:
LDAP schemas
Option 1: Add the schema into your filesystem
test -d /etc/openldap/schema && sudo cp schema/* /etc/openldap/schema
test -d /etc/ldap/schema && sudo cp schema/* /etc/ldap/schema
sudo service slapd restart
Option 2: Use slapadd
sudo slapadd -n0 -l schema/*.ldif
Web interface
Then you can deploy the code either by copying the git repository or installing the pip package:
pip install canaille
Finally you have to run the website in a WSGI server:
pip install gunicorn
gunicorn "canaille:create_app()"
Contribute
Contributions are welcome!
To run the tests, you just need to run tox.
To try a development environment, you can run the docker image and then open https://127.0.0.1:5000 You can then connect with user admin and password admin to access an admin account, or user user and password user for a regular one.
cp canaille/conf/config.sample.toml canaille/conf/config.toml
cp canaille/conf/oauth-authorization-server.sample.json canaille/conf/oauth-authorization-server.json
cp canaille/conf/openid-configuration.sample.json canaille/conf/openid-configuration.json
docker-compose up
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
