support for multiple DN in plugin ldap configuration - Githubissues

jelhub / scimgateway

Using SCIM protocol as a gateway for user provisioning to other endpoints

MIT License

176 stars 57 forks source link

support for multiple DN in plugin ldap configuration #64

Closed shahidv3 closed 2 years ago

shahidv3 commented 2 years ago

hi @jelhub

Can we enable support for multiple DNs which has "(" and "&" to restrict the scope of AD

(&(objectclass=group)(cn="role-xyz"))
(memberOf=CN=role-xyz,OU=Groups,OU=xxx,DC=xx,DC=xxx,DC=xxx)

many thanks

jelhub commented 2 years ago

v4.1.1

[Added]

plugin-ldap support userFilter/groupFilter configuration for restricting scope

Configuration example:

{
  ...
  "userFilter": "(memberOf=CN=grp1,OU=Groups,DC=test,DC=com)(!(memberOf=CN=Domain Admins,CN=Users,DC=test,DC=com))",
  "groupFilter": "(!(cn=grp2))",
  ...
}