Nextcloud AIO authentication schema

[gregjohnsonsaltaire]

Hi, any reason not to add an authentication schema based on "oc_accounts" etc? Tx

[docjyJ]

Hi,

I forgot to activate the notification on this repository 😅

I am updated to the V8. Do you use Stalwart?

To use a unique authentication scheme, you must use LDAP. Stalwart is still in development, other solution could happen.

To use a unique authentication scheme, you must use LDAP. Stalwart is still in development, other solution could happen. See https://stalw.art/compare/.

I should be faster to answer now.

[MrRinkana]

With stalwart enterprise you could use nextcloud as an OIDC provider (users log in with nextcloud accounts).

[docjyJ]

Yes, too bad it has to be paid for...

[MrRinkana]

Wellwellwell, the legend(s) at stalwart at it again: https://stalw.art/blog/oidc-open-source/
(Can use external oidc without enterprise now)

[docjyJ]

I don't have time to look into this at the moment. As soon as I can, I'll see what can be done.

[MrRinkana]

I looked into it and unfortunately its a bit limited, as my understanding is that its only for accessing the mailboxes, and very few email clients support oidc (specifically the OAUTHBEARER SASL mechanism).

In short, its not a quick solution to merging stalwart and nc users, the use will need quite some work first.

To merge nextcloud users and stalwart an dedicated nc app is probably the way to go, using the nc apis to update stalwart trough its api - which would allow some logic around which users/groups get which roles on the stalwart server, and maybe most importantly how the mailbox address is chosen. There is no such app yet, and its not trivial to create as it requires good knowledge of both stalwart and the nc app framework.. I am in the very early stages of writing a app that can synchronise stalwart mail-lists (principal type list; external emails) with nc users own email (to be able to send emails to all members/different groups of the nextcloud instance), but unfortunately I am both learning how to write nc apps and busy with other stuff so that might be some months of an early beta..

[docjyJ]

I work on it https://github.com/docjyJ/nextmail

but yes it's realy complicated, and I'm not sure to use the best way.

The goal is to synchronize username, display name and password.