Bitbucket authentication using LDAP and Client Certificate DN

Question

We have integrated Bitbucket Server behind Apache HTTP Server using SSL.

Apache HTTP Server requires a client certificate and set HTTP SSL_CLIENT_S_DN request header to Bitbucket with user DN extracted from given client certificate.

How can we configure Bitbucket to automatically authenticate user from this request header ?

Our user is managed in LDAP. Each one have an UUID as username.

Ravi GH · Answer

Will it allow you to do the https git operations using the mirror as well ( using SSL cert based auth)

jcron · Answer

We have developed a small module on Apache HTTP Server that performs an LDAP query to retrieve the UUID and password of the user from the DN of his certificate.
Next, we value the HTTP Authorization header of the request that the reverse-proxy returns to Bitbucket.
As a result, Bitbucket is able to automatically authenticate the user according to the configured LDAP settings.

Saqib_hmax5r · Answer

@Jean-Yves CRONIER, were you able to find a solution for this? We have the same requirement.