Skip to content

🚀: LDAAP: Add a filter to find bind DN #1471

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
1 task done
jip149 opened this issue May 6, 2025 · 0 comments
Open
1 task done

🚀: LDAAP: Add a filter to find bind DN #1471

jip149 opened this issue May 6, 2025 · 0 comments
Labels
enhancement New feature or request

Comments

@jip149
Copy link

jip149 commented May 6, 2025

Which feature or improvement would you like to request?

Currently, the username the clients sends has to be part of the DN.

A more flexible approach would be to implement a filter that searches for the DN. This woud allow to login with fields that are not on the DN, eg. email.

Instead of
Bind Auth DN eg uid=?,ou=people,dc=example,dc=org

Use
Bind Auth Filter eg (&(objectClass=person)(|(uid=?)(mail=?)))
Perform search with Bind DN
Bind Auth using dn of results

See maddy for an example of implementation https://maddy.email/reference/auth/ldap/

Is your feature request related to a problem?

No response

Code of Conduct

  • I agree to follow this project's Code of Conduct
@jip149 jip149 added the enhancement New feature or request label May 6, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant