wekan / ldap

LDAP support for Wekan code has been moved to https://github.com/wekan/wekan/tree/master/packages/wekan-ldap , issues to https://github.com/wekan/wekan/issues , and if PRs are needed please add them instead to https://github.com/wekan/wekan/pulls
https://github.com/wekan/wekan/tree/master/packages/wekan-ldap
MIT License
12 stars 10 forks source link

Need to specify different base DN for user and group search #60

Open Jean-Daniel opened 5 years ago

Jean-Daniel commented 5 years ago

Actually, the ldap plugin uses a single baseDN for both User and group requests. Most LDAPs uses distincts "ou" to store users and groups, so it should be possible to specify the user root dn and the group root dn.

For instance, I would like to be able to use LDAP_USER_ROOT_DN=ou=People,dc=example,dc=com and LDAP_GROUP_ROOT_DN=ou=Groups,dc=example,dc=com

Most other tools provide this flexibility and it greatly simplify configuration and also greatly improves query performance as it is possible to reduce the query scope.