[Buildbot-devel] Restricting access to URLs?

[David Coppit]

We're looking to restrict access to certain Buildbot URLs based on LDAP
groups, or IPs in a pinch. The URLs include the build outputs and the
build pages.

Does anyone have recommendations on how to do this?

We noticed there is some LDAP support in Buildbot, but it looks like the
username and password are passed as GET parameters. (?!) We also want to be
sure that people don't have to enter credentials for every page.

Alternatively, we were thinking of setting up Apache as a proxy for BB and
using its LDAP support. With a little caching we can also improve the
scalability of the Buildbot UI.

Thanks and regards,
David