mystiq/dex
Archived
4
0
Fork 1
Code Issues Pull requests Packages Projects Releases Wiki Activity

Merge pull request #698 from Calpicow/groupsearch_by_dn

Browse source 
Allow getAttr to return DN
This commit is contained in:
Eric Chiang 2016-11-18 13:55:18 -08:00 committed by GitHub
parent f45a1a9375 d4aba443ac
commit a7db295714
2 changed files with 9 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
Documentation/ldap-connector.md
View file

@ -11,7 +11,9 @@ The connector executes two primary queries:
## Configuration
User entries are expected to have an email attribute (configurable through `emailAttr`), and a display name attribute (configurable through `nameAttr`). The following is an example config file that can be used by the LDAP connector to authenticate a user.
User entries are expected to have an email attribute (configurable through `emailAttr`), and a display name attribute (configurable through `nameAttr`). `*Attr` attributes could be set to "DN" in situations where it is needed but not available elsewhere, and if "DN" attribute does not exist in the record.
The following is an example config file that can be used by the LDAP connector to authenticate a user.
```yaml

6
connector/ldap/ldap.go
View file

@ -47,6 +47,9 @@ import (
// baseDN: cn=groups,dc=example,dc=com
// filter: "(objectClass=group)"
// userAttr: uid
// # Use if full DN is needed and not available as any other attribute
// # Will only work if "DN" attribute does not exist in the record
// # userAttr: DN
// groupAttr: member
// nameAttr: name
//
@ -285,6 +288,9 @@ func getAttr(e ldap.Entry, name string) string {
}
return a.Values[0]
}
if name == "DN" {
return e.DN
}
return ""
}