search

api7 / lua-resty-ldap

Apache License 2.0
5 stars 6 forks source link

Possible support for Azure Active Directory? #6

Open hanf2x opened 1 year ago

kingluo commented 1 year ago

Now it only supports bind and search (pending pull request).

The most significant missing feature is SASL authentication, which is also true for lualdap.

Azure Active Directory Domain Services (Azure AD DS) provides managed domain services such as domain join, group policy, LDAP, Kerberos/NTLM authentication that is fully compatible with Windows Server Active Directory.

https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/auth-ldap

So, if ADDS is configured to use Kerberos (GSSAPI), then we cannot even pass the authentication phase.

hanf2x commented 1 year ago

I wish this could be developed soon @kingluo. So windows domain joined devices can work with resty ldap