Add search bind support, fix group_identifier typo, fix gidNumber query

- Add search_bind_enabled/search_bind_dn/search_bind_password config
- Support both group_indentifier (original typo) and group_identifier
- Skip gidNumber query when attribute is empty
- Use searchLdap for all search/group queries
This commit is contained in:
Jannik Radix
2026-02-24 22:03:14 +01:00
parent 403350df9b
commit 55a1efcb4e
4 changed files with 75 additions and 12 deletions

View File

@@ -42,4 +42,11 @@ PLUGIN_LOGIN_LDAP:
VERSION_DESC: 'LDAP Version 3 is most popular, only change this if you know what you are doing'
BLACKLIST_FIELDS: 'Blacklist Fields'
BLACKLIST_FIELDS_HELP: 'A list of LDAP fields to be skipped and ignored'
BLACKLIST_FIELDS_PLACEHOLDER: 'Field (ie, jpegPhoto, homePostalAddress)'
BLACKLIST_FIELDS_PLACEHOLDER: 'Field (ie, jpegPhoto, homePostalAddress)'
SEARCH_BIND_CONFIGURATION: 'Search Bind Configuration'
SEARCH_BIND_ENABLE: 'Use Search Bind'
SEARCH_BIND_ENABLE_DESC: 'Use a dedicated LDAP account for user/group searches (useful when regular users lack search permissions)'
SEARCH_BIND_DN: 'Search Bind DN'
SEARCH_BIND_DN_DESC: 'Full DN of the LDAP account used for searches (e.g. cn=readonly,dc=company,dc=com)'
SEARCH_BIND_PASSWORD: 'Search Bind Password'
SEARCH_BIND_PASSWORD_DESC: 'Password for the search bind account'