providers/ldap: add windows adsi support (#7098)

* fix(outpost/ldap): missing user object classes

* add "person" object class
* update user object classes
* update boolean strings to upper for being compliant

tags: WIP-LDAP-Outpost-Windows-ADSI-Support

* feat(outpost/ldap): add subschema attributes

* add supported capability OIDs for Windows
* add relevant supported ldap control OIDs

tags: WIP-LDAP-Outpost-Windows-ADSI-Support

* feat(outpost/ldap): update schema for windows Compatibility

* add relevant dITContentRules for authentik
* add all existing attribute types for Windows/Unix/Linux
* add missing object classes definitions
* update classes definitions for being compliant with LDAP schema
* update attributes orders

tags: WIP-LDAP-Outpost-Windows-ADSI-Support

* feat(outpost/ldap): refine LDAP attribute types

* remove unsused attribute types
* order attribute types

tags: WIP-LDAP-Outpost-Windows-ADSI-Support

internal/outpost/ldap/entries.go

@@ -31,8 +31,8 @@ func (pi *ProviderInstance) UserEntry(u api.User) *ldap.Entry {
 		u.Email = api.PtrString("")
 	}
 	attrs = utils.EnsureAttributes(attrs, map[string][]string{
-		"ak-active":      {strconv.FormatBool(*u.IsActive)},
-		"ak-superuser":   {strconv.FormatBool(u.IsSuperuser)},
+		"ak-active":      {strings.ToUpper(strconv.FormatBool(*u.IsActive))},
+		"ak-superuser":   {strings.ToUpper(strconv.FormatBool(u.IsSuperuser))},
 		"memberOf":       pi.GroupsForUser(u),
 		"cn":             {u.Username},
 		"sAMAccountName": {u.Username},
@@ -41,11 +41,13 @@ func (pi *ProviderInstance) UserEntry(u api.User) *ldap.Entry {
 		"displayName":    {u.Name},
 		"mail":           {*u.Email},
 		"objectClass": {
-			constants.OCUser,
+			constants.OCTop,
+			constants.OCPerson,
 			constants.OCOrgPerson,
 			constants.OCInetOrgPerson,
-			constants.OCAKUser,
+			constants.OCUser,
 			constants.OCPosixAccount,
+			constants.OCAKUser,
 		},
 		"uidNumber":     {pi.GetUidNumber(u)},
 		"gidNumber":     {pi.GetUidNumber(u)},