Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Search for user DN in the scope of LDAP user base before authentication #464

Merged
merged 3 commits into from
Feb 4, 2025

Conversation

rezib
Copy link
Contributor

@rezib rezib commented Feb 4, 2025

fix #446 #447

@rezib rezib added this to the v4.1.0 milestone Feb 4, 2025
@rezib rezib self-assigned this Feb 4, 2025
@rezib rezib linked an issue Feb 4, 2025 that may be closed by this pull request
@rezib rezib force-pushed the pr/feat-446-447 branch 2 times, most recently from d93a4a1 to 7088ffd Compare February 4, 2025 15:15
rezib added 3 commits February 4, 2025 16:23
Introduce ldap > lookup_user_dn boolean parameter for the gateway.
Lookup user DN in the scope of user base subtree before authentication
on LDAP directory by default. This has 2 main benefits:

- Support LDAP directory layout with users distributed in multiple
  branches in the user base.
- Support LDAP directory without the user name attribute in the user DN
  (eg. the full name).

Note this new default behavior can be reverted to the previous behavior
by setting lookup_user_dn=no in [ldap] section of the gateway
configuration.

fix #446 #447
@rezib rezib merged commit 5ab02a3 into main Feb 4, 2025
10 checks passed
@github-actions github-actions bot locked and limited conversation to collaborators Feb 4, 2025
@rezib rezib deleted the pr/feat-446-447 branch February 4, 2025 15:33
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

User DN in LDAP users subtree Support user dn without user name in LDAP directory
1 participant