Make email attribute of LDAP authenticator optional (OD-1320)
Matthias Gerstner opened 3 years ago

LDAP authentication basically works for me, but User Email Attribute is a mandatory field in the configuration form. I'm no expert in LDAP... as it looks the LDAP subtree "User search base" that I need for authentication does not contain a mail attribute on the LDAP server I have to work with. The mail field is found in a different sub-tree that cannot be used for authentication. I'm not sure if that is a common setup but I cannot really change the LDAP server.

Is see various ways to address this:

  • the mail field could be made optional
  • a different LDAP search base could be specified for looking up the mail attribute
  • a mail address could also be constructed from a placeholder string like "{0}@my.domain"
  • Robin Shen changed fields 3 years ago
    Name Previous Value Current Value
    Type
    Bug
    Discussion
  • Robin Shen commented 3 years ago

    OneDev relies on email heavily and authenticated user must have email specified. It is unusual that email attribute exists in a different subtree as the user entry.

  • Robin Shen changed fields 3 years ago
    Name Previous Value Current Value
    Type
    Discussion
    Improvement
  • Robin Shen commented 3 years ago

    Next version will make this attribute optional.

  • Robin Shen changed title 3 years ago
    Previous Value Current Value
    External Authentication -> Generic LDAP with mandatory `user email attribute`
    Make email attribute of LDAP authenticator optional
  • OneDev changed state to 'Closed' 3 years ago
    Previous Value Current Value
    Open
    Closed
  • OneDev commented 3 years ago

    State changed as code fixing the issue is committed (677b7230)

  • OneDev changed state to 'Released' 3 years ago
    Previous Value Current Value
    Closed
    Released
  • OneDev commented 3 years ago

    State changed as build #3563 is successful

issue 1/1
Type
Improvement
Priority
Normal
Assignee
Issue Votes (0)
Watchers (4)
Reference
OD-1320
Please wait...
Connection lost or session expired, reload to recover
Page is in error, reload to recover