{"action":"opened","issue":{"url":"https://api.github.com/repos/rancher/rancher/issues/3725","repository_url":"https://api.github.com/repos/rancher/rancher","labels_url":"https://api.github.com/repos/rancher/rancher/issues/3725/labels{/name}","comments_url":"https://api.github.com/repos/rancher/rancher/issues/3725/comments","events_url":"https://api.github.com/repos/rancher/rancher/issues/3725/events","html_url":"https://github.com/rancher/rancher/issues/3725","id":137506590,"number":3725,"title":"Add authentication chaining (LDAP/AD + Local)","user":{"login":"pizzarabe","id":12611136,"avatar_url":"https://avatars.githubusercontent.com/u/12611136?v=3","gravatar_id":"","url":"https://api.github.com/users/pizzarabe","html_url":"https://github.com/pizzarabe","followers_url":"https://api.github.com/users/pizzarabe/followers","following_url":"https://api.github.com/users/pizzarabe/following{/other_user}","gists_url":"https://api.github.com/users/pizzarabe/gists{/gist_id}","starred_url":"https://api.github.com/users/pizzarabe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pizzarabe/subscriptions","organizations_url":"https://api.github.com/users/pizzarabe/orgs","repos_url":"https://api.github.com/users/pizzarabe/repos","events_url":"https://api.github.com/users/pizzarabe/events{/privacy}","received_events_url":"https://api.github.com/users/pizzarabe/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2016-03-01T08:23:01Z","updated_at":"2016-03-01T08:23:01Z","closed_at":null,"body":"A bunch of Software is able to connect different authentication methods together (etc. Redmine, OTRS,...). To get access to Rancher your user have to pass both authentication methods (LDAP/ AD and Local). With a feature like this you are able to handle users within the same LDAP/AD Server differently. \r\n\r\nIn our case we have the same LDAP Server for our administrators, developers and other employees but we want to grant access only for our admins and developers. Most of them should only have \"user\" privileges but some of them should have \"admin\" privileges as well.\r\n"}}