| 
						
					 | 
					
						
						
							
						
						64ca5d42be
					 | 
					
						
						
							
							outposts/ldap: allow overriding gidNumber for a user (#8003)
						
						
						
						
						
						
						
						Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space> 
						
						
					 | 
					
						2023-12-28 14:21:08 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						f11bb8bfd4
					 | 
					
						
						
							
							providers/ldap: add windows adsi support (#7098)
						
						
						
						
						
						
						
						* fix(outpost/ldap): missing user object classes
* add "person" object class
* update user object classes
* update boolean strings to upper for being compliant
tags: WIP-LDAP-Outpost-Windows-ADSI-Support
* feat(outpost/ldap): add subschema attributes
* add supported capability OIDs for Windows
* add relevant supported ldap control OIDs
tags: WIP-LDAP-Outpost-Windows-ADSI-Support
* feat(outpost/ldap): update schema for windows Compatibility
* add relevant dITContentRules for authentik
* add all existing attribute types for Windows/Unix/Linux
* add missing object classes definitions
* update classes definitions for being compliant with LDAP schema
* update attributes orders
tags: WIP-LDAP-Outpost-Windows-ADSI-Support
* feat(outpost/ldap): refine LDAP attribute types
* remove unsused attribute types
* order attribute types
tags: WIP-LDAP-Outpost-Windows-ADSI-Support 
						
						
					 | 
					
						2023-10-09 13:17:46 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						ae7ea4dd11
					 | 
					
						
						
							
							outposts/ldap: add more tests (#6188)
						
						
						
						
						
						
						
						* outposts/ldap: add tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix missing posixAccount
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* attempt to expand attributes
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix routing without base DN
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* more logging
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* remove our custom attribute filtering since this is done by the ldap library
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* add test for schema
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io> 
						
						
					 | 
					
						2023-07-08 20:51:05 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						0ce41a1b2d
					 | 
					
						
						
							
							providers/ldap: add StartTLS support (#5861)
						
						
						
						
						
						
						
						* providers/ldap: add StartTLS support
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* add starttls test
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* update form and docs
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* re-add tls server name
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* update release notes
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io> 
						
						
					 | 
					
						2023-06-06 21:40:19 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						bb92c4a967
					 | 
					
						
						
							
							providers/ldap: remove deprecated fields (#5154)
						
						
						
						
						
						
						
						* providers/ldap: remove deprecated fields
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* update changelog
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io> 
						
						
					 | 
					
						2023-04-21 14:10:24 +03:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						345fa1bed6
					 | 
					
						
						
							
							providers/ldap: fix duplicate attributes (#4972)
						
						
						
						
						
						
						
						closes #4971
Signed-off-by: Jens Langhammer <jens@goauthentik.io> 
						
						
					 | 
					
						2023-03-16 12:14:17 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						cd99b6e48f
					 | 
					
						
						
							
							providers/ldap: making ldap compatible with synology (#4694)
						
						
						
						
						
						
						
						* internal/outpost/ldap: making ldap compatible with synology
* fix duplicate attributes
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* add docs about homedirectory
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix duplicate attributes
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* add substitution to values
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Jens Langhammer <jens@goauthentik.io> 
						
						
					 | 
					
						2023-02-22 15:26:41 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						51c6a14786
					 | 
					
						
						
							
							providers/ldap: Improve compatibility with LDAP clients (#4750)
						
						
						
						
						
						
						
						* Fixed invalid LDAP attributes by replacing '.'s and '/'s with '-'
* Leave old fields for now for backward compatibility
* Add forgotten depreceated field
* Fix tests
* Fix tests
* use shorter attribute names
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* sanitize attributes
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* keep both sanitized and unsanitized user fields
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* add sanitized fields to test
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Jens Langhammer <jens@goauthentik.io> 
						
						
					 | 
					
						2023-02-22 14:18:22 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						b864de7721
					 | 
					
						
						
							
							outposts/ldap: increase compatibility with different types in user and group attributes
						
						
						
						
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 
						
						
					 | 
					
						2022-10-16 22:32:18 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						50819ae0f0
					 | 
					
						
						
							
							*: improve error handling in ldap outpost, ignore additional errors
						
						
						
						
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 
						
						
					 | 
					
						2022-09-23 22:11:47 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						62a939b91d
					 | 
					
						
						
							
							internal: bump api client to v3
						
						
						
						
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 
						
						
					 | 
					
						2022-03-03 10:40:07 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						bf347730b3
					 | 
					
						
						
							
							outposts/ldap: remove deprecated fields
						
						
						
						
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 
						
						
					 | 
					
						2022-01-07 09:52:19 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						4d36699b78
					 | 
					
						
						
							
							outpost/ldap: cleanup
						
						
						
						
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 
						
						
					 | 
					
						2021-11-06 19:32:11 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						5a8c66d325
					 | 
					
						
						
							
							providers/ldap: memory Query (#1681)
						
						
						
						
						
						
						
						* outposts/ldap: modularise ldap outpost, to allow different searchers and binders
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* outposts/ldap: add basic in-memory searcher
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* providers/ldap: add search mode field
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* outpost: add search mode field
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 
						
						
					 | 
					
						2021-11-05 10:37:30 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 |