forked from mystiq/dex
f2e7823db9
Add an ability to fetch user's membership from groups of a different type by specifying multiple group attribute to user attribute value matchers in the Dex config: userMatchers: - userAttr: uid groupAttr: memberUid - userAttr: DN groupAttr: member In other words the user's groups can be fetched now from ldap structure similar to the following: dn: cn=john,ou=People,dc=example,dc=org objectClass: person objectClass: inetOrgPerson sn: doe cn: john uid: johndoe mail: johndoe@example.com userpassword: bar dn: cn=qa,ou=Groups,ou=Portland,dc=example,dc=org objectClass: groupOfNames cn: qa member: cn=john,ou=People,dc=example,dc=org dn: cn=logger,ou=UnixGroups,ou=Portland,dc=example,dc=org objectClass: posixGroup gidNumber: 1000 cn: logger memberUid: johndoe Signed-off-by: Vitaliy Dmitriev <vi7alya@gmail.com> |
||
---|---|---|
.. | ||
connectors | ||
img | ||
logos | ||
proposals | ||
api.md | ||
authproxy.md | ||
custom-scopes-claims-clients.md | ||
dev-become-a-maintainer.md | ||
dev-dependencies.md | ||
dev-integration-tests.md | ||
dev-releases.md | ||
getting-started.md | ||
github-connector.md | ||
gitlab-connector.md | ||
integrations.md | ||
kubernetes.md | ||
ldap-connector.md | ||
linkedin-connector.md | ||
microsoft-connector.md | ||
oidc-certification-setup.md | ||
oidc-connector.md | ||
openid-connect.md | ||
saml-connector.md | ||
storage.md | ||
templates.md | ||
using-dex.md | ||
v2.md |