[PR #19381] [CLOSED] feat: add LDAP group filtering based on search filter memberOf #25193

New Issue

Closed

opened 2026-04-20 05:48:44 -05:00 by GiteaMirror · 0 comments

GiteaMirror commented 2026-04-20 05:48:44 -05:00

Owner

Copy Link

📋 Pull Request Information

Original PR: https://github.com/open-webui/open-webui/pull/19381
Author: @ctolon
Created: 11/22/2025
Status: ❌ Closed

Base: dev ← Head: ldap-filter-memberof

---

📝 Commits (1)

• 6025264 add functionality for sync LDAP memberOf groups which only in LDAP search filters

📊 Changes

4 files changed (+57 additions, -0 deletions)

View changed files

📝 backend/open_webui/config.py (+6 -0)
📝 backend/open_webui/main.py (+2 -0)
📝 backend/open_webui/routers/auths.py (+24 -0)
➕ backend/open_webui/utils/ldap_utils.py (+25 -0)

📄 Description

Pull Request Checklist

Note to first-time contributors: Please open a discussion post in Discussions to discuss your idea/fix with the community before creating a pull request, and describe your changes before submitting a pull request.

This is to ensure large feature PRs are discussed with the community first, before starting work on it. If the community does not want this feature or it is not relevant for Open WebUI as a project, it can be identified in the discussion before working on the feature and submitting the PR.

Before submitting, make sure you've checked the following:

• Target branch: Verify that the pull request targets the dev branch. Not targeting the dev branch will lead to immediate closure of the PR.
• Description: Provide a concise description of the changes made in this pull request down below.
• Changelog: Ensure a changelog entry following the format of Keep a Changelog is added at the bottom of the PR description.
• Documentation: If necessary, update relevant documentation Open WebUI Docs like environment variables, the tutorials, or other documentation sources.
• Dependencies: Are there any new dependencies? Have you updated the dependency versions in the documentation?
• Testing: Perform manual tests to verify the implemented fix/feature works as intended AND does not break any other functionality. Take this as an opportunity to make screenshots of the feature/fix and include it in the PR description.
• Agentic AI Code: Confirm this Pull Request is not written by any AI Agent or has at least gone through additional human review AND manual testing. If any AI Agent is the co-author of this PR, it may lead to immediate closure of the PR.
• Code review: Have you performed a self-review of your code, addressing any coding standard issues and ensuring adherence to the project's coding standards?
• Title Prefix: To clearly categorize this pull request, prefix the pull request title using one of the following:
  • BREAKING CHANGE: Significant changes that may affect compatibility
  • build: Changes that affect the build system or external dependencies
  • ci: Changes to our continuous integration processes or workflows
  • chore: Refactor, cleanup, or other non-functional code changes
  • docs: Documentation update or addition
  • feat: Introduces a new feature or enhancement to the codebase
  • fix: Bug fix or error correction
  • i18n: Internationalization or localization changes
  • perf: Performance improvement
  • refactor: Code restructuring for better maintainability, readability, or scalability
  • style: Changes that do not affect the meaning of the code (white space, formatting, missing semi-colons, etc.)
  • test: Adding missing tests or correcting existing tests
  • WIP: Work in progress, a temporary label for incomplete or ongoing work

Changelog Entry

Description

• This pull request introduces an optional LDAP group filtering feature that allows administrators to restrict which LDAP groups are synced to Open WebUI based on the
  memberOf filters defined in LDAP_SEARCH_FILTERS. This addresses a common enterprise use case where users belong to many AD/LDAP groups but only specific groups
  should be managed in Open WebUI.

• When LDAP_FILTER_MEMBEROF is enabled, the system parses memberOf filters from LDAP_SEARCH_FILTERS and only syncs groups that match the filter criteria. This
  maintains backward compatibility as the feature is disabled by default.

Added

• • New environment variable LDAP_FILTER_MEMBEROF (boolean, default: false) to control LDAP group filtering behavior
• New utility module backend/open_webui/utils/ldap_utils.py containing:
  • parse_memberof_groups_from_filter() function to extract group CNs from LDAP filters
  • Robust DN parsing using ldap3.utils.dn.parse_dn()
  • Support for complex LDAP filter syntax (OR conditions, multiple memberOf filters)
• Comprehensive logging for group filtering operations to aid in troubleshooting

Changed

• backend/open_webui/config.py: Added LDAP_FILTER_MEMBEROF configuration with persistent storage support
• backend/open_webui/main.py: Registered new config option in application state
• backend/open_webui/routers/auths.py:
  • Implemented group filtering logic in LDAP authentication flow (line 368-388)
  • Added LDAP_FILTER_MEMBEROF config retrieval during login
  • Enhanced logging to show filtered vs. original group counts
  • Imported parse_memberof_groups_from_filter utility function

Deprecated

• None

Removed

• None

Fixed

• None

Security

• None]

Breaking Changes

• BREAKING CHANGE: None

---

Additional Information

• The parser uses regex pattern (?i)(?<![a-z0-9_])memberOf\s*=\s*([^()]+) for robust filter extraction
• Handles edge cases: malformed DNs, empty filters, parse errors (gracefully continues)
• Works with both single and multiple memberOf filters in search strings
• Maintains existing behavior when disabled (all groups synced)
• I haven't added the relevant environment variable for documentation yet, I can add it if this feature is suitable for you.

Screenshots or Videos

• I don't have screenshoot but I tested parser with this code:

import re
from ldap3.utils.dn import parse_dn

def parse_memberof_groups_from_filter(ldap_filter: str) -> list[str]:
    if not ldap_filter:
        return []

    pattern = r'(?i)(?<![a-z0-9_])memberOf\s*=\s*([^()]+)'
    matches = re.findall(pattern, ldap_filter)

    group_cns: list[str] = []

    for dn in matches:
        dn = dn.strip()
        try:
            rdns = parse_dn(dn, escape=True, strip=True)
        except Exception:
            continue

        if isinstance(rdns, list) and len(rdns) > 0 and isinstance(rdns[0], tuple):
            cns = [part[1] for part in rdns if len(part) >= 2 and part[0].lower() == "cn"]
            group_cns.extend(cns)
            continue

    return group_cns


test_filters = [
    "(memberOf=CN=Admins,OU=Groups,DC=example,DC=com)",
    "(MeMbErOf=CN=DevTeam,OU=IT,DC=example,DC=com)",
    "(&(objectClass=user)(memberOf=CN=HR,OU=Dept,DC=example,DC=com))",
    "(|(memberOf=CN=Finance,OU=Groups,DC=example,DC=com)(memberOf=CN=Legal,OU=Groups,DC=example,DC=com))",
    "(&(|(memberOf=CN=TeamA,OU=Groups,DC=example,DC=com)(memberOf=CN=TeamB,OU=Groups,DC=example,DC=com))(objectClass=user))",
    "asd(|(memberOf=CN=Foo_uid=bar,OU=user,OU=za,DC=ok,DC=za))",
    "(&(objectClass=user)(|(memberOf=CN=Group1,OU=G,DC=x,DC=y)(memberOf=CN=Group2,OU=G,DC=x,DC=y)(memberOf=CN=Group3,OU=G,DC=x,DC=y)))",
    "(&(sAMAccountName=jdoe)(memberOf=CN=Developers,OU=Teams,DC=example,DC=com))",
    "(&(memberOf=CN=GroupX,OU=G,DC=e,DC=com)(memberOf=CN=GroupY,OU=G,DC=e,DC=com))",
    "(((memberOf=CN=NestedGroup,OU=Inner,OU=Groups,DC=example,DC=com)))",
    "(memberOf=CN=Domain Admins,OU=Groups,DC=example,DC=com)",
    " ( memberOf = CN=Helpdesk,OU=Groups,DC=example,DC=com ) ",
    "(memberOf=OU=Groups,OU=EMEA,CN=Ops Team,DC=example,DC=com)",
    "(memberOf=CN=FirstCN,CN=SecondCN,OU=Groups,DC=example,DC=com)",
    "(&(objectClass=user)(sAMAccountName=jdoe))",
    "(isMemberOf=CN=SpecialGroup,OU=Test,DC=example,DC=com)",
    "(MEMBEROF=CN=UPPERCASE,OU=G,DC=example,DC=com)",
    "(&(|(memberOf=CN=Team1,OU=G,DC=e,DC=com)(department=IT))(memberOf=CN=Team2,OU=G,DC=e,DC=com))",
    "(& (memberOf=CN=One,OU=G,DC=e,DC=com) (mail=*@example.com) (memberOf=CN=Two,OU=G,DC=e,DC=com))",
    "(& (|(memberOf=CN=Alpha,OU=G,DC=e,DC=com) (memberOf=CN=Beta Team,OU=G,DC=e,DC=com)) (!(memberOf=CN=Blocked,OU=G,DC=e,DC=com)) )",
]

for f in test_filters:
    print("Filter: ", f)
    print("memberOf: ", parse_memberof_groups_from_filter(f))
    print("-" * 40)

output:

Filter:  (memberOf=CN=Admins,OU=Groups,DC=example,DC=com)
memberOf:  ['Admins']
----------------------------------------
Filter:  (MeMbErOf=CN=DevTeam,OU=IT,DC=example,DC=com)
memberOf:  ['DevTeam']
----------------------------------------
Filter:  (&(objectClass=user)(memberOf=CN=HR,OU=Dept,DC=example,DC=com))
memberOf:  ['HR']
----------------------------------------
Filter:  (|(memberOf=CN=Finance,OU=Groups,DC=example,DC=com)(memberOf=CN=Legal,OU=Groups,DC=example,DC=com))
memberOf:  ['Finance', 'Legal']
----------------------------------------
Filter:  (&(|(memberOf=CN=TeamA,OU=Groups,DC=example,DC=com)(memberOf=CN=TeamB,OU=Groups,DC=example,DC=com))(objectClass=user))
memberOf:  ['TeamA', 'TeamB']
----------------------------------------
Filter:  asd(|(memberOf=CN=Foo_uid=bar,OU=user,OU=za,DC=ok,DC=za))
memberOf:  ['Foo_uid\\=bar']
----------------------------------------
Filter:  (&(objectClass=user)(|(memberOf=CN=Group1,OU=G,DC=x,DC=y)(memberOf=CN=Group2,OU=G,DC=x,DC=y)(memberOf=CN=Group3,OU=G,DC=x,DC=y)))
memberOf:  ['Group1', 'Group2', 'Group3']
----------------------------------------
Filter:  (&(sAMAccountName=jdoe)(memberOf=CN=Developers,OU=Teams,DC=example,DC=com))
memberOf:  ['Developers']
----------------------------------------
Filter:  (&(memberOf=CN=GroupX,OU=G,DC=e,DC=com)(memberOf=CN=GroupY,OU=G,DC=e,DC=com))
memberOf:  ['GroupX', 'GroupY']
----------------------------------------
Filter:  (((memberOf=CN=NestedGroup,OU=Inner,OU=Groups,DC=example,DC=com)))
memberOf:  ['NestedGroup']
----------------------------------------
Filter:  (memberOf=CN=Domain Admins,OU=Groups,DC=example,DC=com)
memberOf:  ['Domain Admins']
----------------------------------------
Filter:   ( memberOf = CN=Helpdesk,OU=Groups,DC=example,DC=com ) 
memberOf:  ['Helpdesk']
----------------------------------------
Filter:  (memberOf=OU=Groups,OU=EMEA,CN=Ops Team,DC=example,DC=com)
memberOf:  ['Ops Team']
----------------------------------------
Filter:  (memberOf=CN=FirstCN,CN=SecondCN,OU=Groups,DC=example,DC=com)
memberOf:  ['FirstCN', 'SecondCN']
----------------------------------------
Filter:  (&(objectClass=user)(sAMAccountName=jdoe))
memberOf:  []
----------------------------------------
Filter:  (isMemberOf=CN=SpecialGroup,OU=Test,DC=example,DC=com)
memberOf:  []
----------------------------------------
Filter:  (MEMBEROF=CN=UPPERCASE,OU=G,DC=example,DC=com)
memberOf:  ['UPPERCASE']
----------------------------------------
Filter:  (&(|(memberOf=CN=Team1,OU=G,DC=e,DC=com)(department=IT))(memberOf=CN=Team2,OU=G,DC=e,DC=com))
memberOf:  ['Team1', 'Team2']
----------------------------------------
Filter:  (& (memberOf=CN=One,OU=G,DC=e,DC=com) (mail=*@example.com) (memberOf=CN=Two,OU=G,DC=e,DC=com))
memberOf:  ['One', 'Two']
----------------------------------------
Filter:  (& (|(memberOf=CN=Alpha,OU=G,DC=e,DC=com) (memberOf=CN=Beta Team,OU=G,DC=e,DC=com)) (!(memberOf=CN=Blocked,OU=G,DC=e,DC=com)) )
memberOf:  ['Alpha', 'Beta Team', 'Blocked']
----------------------------------------

Contributor License Agreement

By submitting this pull request, I confirm that I have read and fully agree to the Contributor License Agreement (CLA), and I am providing my contributions under its terms.

Note

Deleting the CLA section will lead to immediate closure of your PR and it will not be merged in.

---

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/open-webui/open-webui/pull/19381 **Author:** [@ctolon](https://github.com/ctolon) **Created:** 11/22/2025 **Status:** ❌ Closed **Base:** `dev` ← **Head:** `ldap-filter-memberof` --- ### 📝 Commits (1) - [`6025264`](https://github.com/open-webui/open-webui/commit/6025264d06d048ae71ad3ae43c68234eebc1fa75) add functionality for sync LDAP memberOf groups which only in LDAP search filters ### 📊 Changes **4 files changed** (+57 additions, -0 deletions) <details> <summary>View changed files</summary> 📝 `backend/open_webui/config.py` (+6 -0) 📝 `backend/open_webui/main.py` (+2 -0) 📝 `backend/open_webui/routers/auths.py` (+24 -0) ➕ `backend/open_webui/utils/ldap_utils.py` (+25 -0) </details> ### 📄 Description # Pull Request Checklist ### Note to first-time contributors: Please open a discussion post in [Discussions](https://github.com/open-webui/open-webui/discussions) to discuss your idea/fix with the community before creating a pull request, and describe your changes before submitting a pull request. This is to ensure large feature PRs are discussed with the community first, before starting work on it. If the community does not want this feature or it is not relevant for Open WebUI as a project, it can be identified in the discussion before working on the feature and submitting the PR. **Before submitting, make sure you've checked the following:** - [x] **Target branch:** Verify that the pull request targets the `dev` branch. **Not targeting the `dev` branch will lead to immediate closure of the PR.** - [x] **Description:** Provide a concise description of the changes made in this pull request down below. - [x] **Changelog:** Ensure a changelog entry following the format of [Keep a Changelog](https://keepachangelog.com/) is added at the bottom of the PR description. - [ ] **Documentation:** If necessary, update relevant documentation [Open WebUI Docs](https://github.com/open-webui/docs) like environment variables, the tutorials, or other documentation sources. - [ ] **Dependencies:** Are there any new dependencies? Have you updated the dependency versions in the documentation? - [x] **Testing:** Perform manual tests to **verify the implemented fix/feature works as intended AND does not break any other functionality**. Take this as an opportunity to **make screenshots of the feature/fix and include it in the PR description**. - [x] **Agentic AI Code:** Confirm this Pull Request is **not written by any AI Agent** or has at least **gone through additional human review AND manual testing**. If any AI Agent is the co-author of this PR, it may lead to immediate closure of the PR. - [x] **Code review:** Have you performed a self-review of your code, addressing any coding standard issues and ensuring adherence to the project's coding standards? - [x] **Title Prefix:** To clearly categorize this pull request, prefix the pull request title using one of the following: - **BREAKING CHANGE**: Significant changes that may affect compatibility - **build**: Changes that affect the build system or external dependencies - **ci**: Changes to our continuous integration processes or workflows - **chore**: Refactor, cleanup, or other non-functional code changes - **docs**: Documentation update or addition - **feat**: Introduces a new feature or enhancement to the codebase - **fix**: Bug fix or error correction - **i18n**: Internationalization or localization changes - **perf**: Performance improvement - **refactor**: Code restructuring for better maintainability, readability, or scalability - **style**: Changes that do not affect the meaning of the code (white space, formatting, missing semi-colons, etc.) - **test**: Adding missing tests or correcting existing tests - **WIP**: Work in progress, a temporary label for incomplete or ongoing work # Changelog Entry ### Description - This pull request introduces an optional LDAP group filtering feature that allows administrators to restrict which LDAP groups are synced to Open WebUI based on the `memberOf` filters defined in `LDAP_SEARCH_FILTERS`. This addresses a common enterprise use case where users belong to many AD/LDAP groups but only specific groups should be managed in Open WebUI. - When `LDAP_FILTER_MEMBEROF` is enabled, the system parses `memberOf` filters from `LDAP_SEARCH_FILTERS` and only syncs groups that match the filter criteria. This maintains backward compatibility as the feature is disabled by default. ### Added - - New environment variable `LDAP_FILTER_MEMBEROF` (boolean, default: `false`) to control LDAP group filtering behavior - New utility module `backend/open_webui/utils/ldap_utils.py` containing: - `parse_memberof_groups_from_filter()` function to extract group CNs from LDAP filters - Robust DN parsing using `ldap3.utils.dn.parse_dn()` - Support for complex LDAP filter syntax (OR conditions, multiple memberOf filters) - Comprehensive logging for group filtering operations to aid in troubleshooting ### Changed - `backend/open_webui/config.py`: Added `LDAP_FILTER_MEMBEROF` configuration with persistent storage support - `backend/open_webui/main.py`: Registered new config option in application state - `backend/open_webui/routers/auths.py`: - Implemented group filtering logic in LDAP authentication flow (line 368-388) - Added `LDAP_FILTER_MEMBEROF` config retrieval during login - Enhanced logging to show filtered vs. original group counts - Imported `parse_memberof_groups_from_filter` utility function ### Deprecated - None ### Removed - None ### Fixed - None ### Security - None] ### Breaking Changes - **BREAKING CHANGE**: None --- ### Additional Information - The parser uses regex pattern `(?i)(?<![a-z0-9_])memberOf\s*=\s*([^()]+)` for robust filter extraction - Handles edge cases: malformed DNs, empty filters, parse errors (gracefully continues) - Works with both single and multiple `memberOf` filters in search strings - Maintains existing behavior when disabled (all groups synced) - I haven't added the relevant environment variable for documentation yet, I can add it if this feature is suitable for you. ### Screenshots or Videos - I don't have screenshoot but I tested parser with this code: ```python import re from ldap3.utils.dn import parse_dn def parse_memberof_groups_from_filter(ldap_filter: str) -> list[str]: if not ldap_filter: return [] pattern = r'(?i)(?<![a-z0-9_])memberOf\s*=\s*([^()]+)' matches = re.findall(pattern, ldap_filter) group_cns: list[str] = [] for dn in matches: dn = dn.strip() try: rdns = parse_dn(dn, escape=True, strip=True) except Exception: continue if isinstance(rdns, list) and len(rdns) > 0 and isinstance(rdns[0], tuple): cns = [part[1] for part in rdns if len(part) >= 2 and part[0].lower() == "cn"] group_cns.extend(cns) continue return group_cns test_filters = [ "(memberOf=CN=Admins,OU=Groups,DC=example,DC=com)", "(MeMbErOf=CN=DevTeam,OU=IT,DC=example,DC=com)", "(&(objectClass=user)(memberOf=CN=HR,OU=Dept,DC=example,DC=com))", "(|(memberOf=CN=Finance,OU=Groups,DC=example,DC=com)(memberOf=CN=Legal,OU=Groups,DC=example,DC=com))", "(&(|(memberOf=CN=TeamA,OU=Groups,DC=example,DC=com)(memberOf=CN=TeamB,OU=Groups,DC=example,DC=com))(objectClass=user))", "asd(|(memberOf=CN=Foo_uid=bar,OU=user,OU=za,DC=ok,DC=za))", "(&(objectClass=user)(|(memberOf=CN=Group1,OU=G,DC=x,DC=y)(memberOf=CN=Group2,OU=G,DC=x,DC=y)(memberOf=CN=Group3,OU=G,DC=x,DC=y)))", "(&(sAMAccountName=jdoe)(memberOf=CN=Developers,OU=Teams,DC=example,DC=com))", "(&(memberOf=CN=GroupX,OU=G,DC=e,DC=com)(memberOf=CN=GroupY,OU=G,DC=e,DC=com))", "(((memberOf=CN=NestedGroup,OU=Inner,OU=Groups,DC=example,DC=com)))", "(memberOf=CN=Domain Admins,OU=Groups,DC=example,DC=com)", " ( memberOf = CN=Helpdesk,OU=Groups,DC=example,DC=com ) ", "(memberOf=OU=Groups,OU=EMEA,CN=Ops Team,DC=example,DC=com)", "(memberOf=CN=FirstCN,CN=SecondCN,OU=Groups,DC=example,DC=com)", "(&(objectClass=user)(sAMAccountName=jdoe))", "(isMemberOf=CN=SpecialGroup,OU=Test,DC=example,DC=com)", "(MEMBEROF=CN=UPPERCASE,OU=G,DC=example,DC=com)", "(&(|(memberOf=CN=Team1,OU=G,DC=e,DC=com)(department=IT))(memberOf=CN=Team2,OU=G,DC=e,DC=com))", "(& (memberOf=CN=One,OU=G,DC=e,DC=com) (mail=*@example.com) (memberOf=CN=Two,OU=G,DC=e,DC=com))", "(& (|(memberOf=CN=Alpha,OU=G,DC=e,DC=com) (memberOf=CN=Beta Team,OU=G,DC=e,DC=com)) (!(memberOf=CN=Blocked,OU=G,DC=e,DC=com)) )", ] for f in test_filters: print("Filter: ", f) print("memberOf: ", parse_memberof_groups_from_filter(f)) print("-" * 40) ``` output: ```shell Filter: (memberOf=CN=Admins,OU=Groups,DC=example,DC=com) memberOf: ['Admins'] ---------------------------------------- Filter: (MeMbErOf=CN=DevTeam,OU=IT,DC=example,DC=com) memberOf: ['DevTeam'] ---------------------------------------- Filter: (&(objectClass=user)(memberOf=CN=HR,OU=Dept,DC=example,DC=com)) memberOf: ['HR'] ---------------------------------------- Filter: (|(memberOf=CN=Finance,OU=Groups,DC=example,DC=com)(memberOf=CN=Legal,OU=Groups,DC=example,DC=com)) memberOf: ['Finance', 'Legal'] ---------------------------------------- Filter: (&(|(memberOf=CN=TeamA,OU=Groups,DC=example,DC=com)(memberOf=CN=TeamB,OU=Groups,DC=example,DC=com))(objectClass=user)) memberOf: ['TeamA', 'TeamB'] ---------------------------------------- Filter: asd(|(memberOf=CN=Foo_uid=bar,OU=user,OU=za,DC=ok,DC=za)) memberOf: ['Foo_uid\\=bar'] ---------------------------------------- Filter: (&(objectClass=user)(|(memberOf=CN=Group1,OU=G,DC=x,DC=y)(memberOf=CN=Group2,OU=G,DC=x,DC=y)(memberOf=CN=Group3,OU=G,DC=x,DC=y))) memberOf: ['Group1', 'Group2', 'Group3'] ---------------------------------------- Filter: (&(sAMAccountName=jdoe)(memberOf=CN=Developers,OU=Teams,DC=example,DC=com)) memberOf: ['Developers'] ---------------------------------------- Filter: (&(memberOf=CN=GroupX,OU=G,DC=e,DC=com)(memberOf=CN=GroupY,OU=G,DC=e,DC=com)) memberOf: ['GroupX', 'GroupY'] ---------------------------------------- Filter: (((memberOf=CN=NestedGroup,OU=Inner,OU=Groups,DC=example,DC=com))) memberOf: ['NestedGroup'] ---------------------------------------- Filter: (memberOf=CN=Domain Admins,OU=Groups,DC=example,DC=com) memberOf: ['Domain Admins'] ---------------------------------------- Filter: ( memberOf = CN=Helpdesk,OU=Groups,DC=example,DC=com ) memberOf: ['Helpdesk'] ---------------------------------------- Filter: (memberOf=OU=Groups,OU=EMEA,CN=Ops Team,DC=example,DC=com) memberOf: ['Ops Team'] ---------------------------------------- Filter: (memberOf=CN=FirstCN,CN=SecondCN,OU=Groups,DC=example,DC=com) memberOf: ['FirstCN', 'SecondCN'] ---------------------------------------- Filter: (&(objectClass=user)(sAMAccountName=jdoe)) memberOf: [] ---------------------------------------- Filter: (isMemberOf=CN=SpecialGroup,OU=Test,DC=example,DC=com) memberOf: [] ---------------------------------------- Filter: (MEMBEROF=CN=UPPERCASE,OU=G,DC=example,DC=com) memberOf: ['UPPERCASE'] ---------------------------------------- Filter: (&(|(memberOf=CN=Team1,OU=G,DC=e,DC=com)(department=IT))(memberOf=CN=Team2,OU=G,DC=e,DC=com)) memberOf: ['Team1', 'Team2'] ---------------------------------------- Filter: (& (memberOf=CN=One,OU=G,DC=e,DC=com) (mail=*@example.com) (memberOf=CN=Two,OU=G,DC=e,DC=com)) memberOf: ['One', 'Two'] ---------------------------------------- Filter: (& (|(memberOf=CN=Alpha,OU=G,DC=e,DC=com) (memberOf=CN=Beta Team,OU=G,DC=e,DC=com)) (!(memberOf=CN=Blocked,OU=G,DC=e,DC=com)) ) memberOf: ['Alpha', 'Beta Team', 'Blocked'] ---------------------------------------- ``` ### Contributor License Agreement By submitting this pull request, I confirm that I have read and fully agree to the [Contributor License Agreement (CLA)](https://github.com/open-webui/open-webui/blob/main/CONTRIBUTOR_LICENSE_AGREEMENT), and I am providing my contributions under its terms. > [!NOTE] > Deleting the CLA section will lead to immediate closure of your PR and it will not be merged in. --- _{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

GiteaMirror added the pull-request label 2026-04-20 05:48:44 -05:00

GiteaMirror closed this issue 2026-04-20 05:48:45 -05:00

Sign in to join this conversation.

No Branch/Tag Specified

Branches Tags

main

dev

v0.10.2

v0.10.1

v0.10.0

v0.9.6

v0.9.5

v0.9.4

v0.9.3

v0.9.2

v0.9.1

v0.9.0

v0.8.12

v0.8.11

v0.8.10

v0.8.9

v0.8.8

v0.8.7

v0.8.6

v0.8.5

v0.8.4

v0.8.3

v0.8.2

v0.8.1

v0.8.0

v0.7.2

v0.7.1

v0.7.0

v0.6.43

v0.6.42

v0.6.41

v0.6.40

v0.6.39

v0.6.38

v0.6.37

v0.6.36

v0.6.35

v0.6.34

v0.6.33

v0.6.32

v0.6.31

v0.6.30

v0.6.29

v0.6.28

v0.6.27

v0.6.26

v0.6.25

v0.6.24

v0.6.23

v0.6.22

v0.6.21

v0.6.20

v0.6.19

v0.6.18

v0.6.17

v0.6.16

v0.6.15

v0.6.14

v0.6.13

v0.6.12

v0.6.11

v0.6.10

v0.6.9

v0.6.8

v0.6.7

v0.6.6

v0.6.5

v0.6.4

v0.6.3

v0.6.2

v0.6.1

v0.6.0

v0.5.20

v0.5.19

v0.5.18

v0.5.17

v0.5.16

v0.5.15

v0.5.14

v0.5.13

v0.5.12

v0.5.11

v0.5.10

v0.5.9

v0.5.8

v0.5.7

v0.5.6

v0.5.5

v0.5.4

v0.5.3

v0.5.2

v0.5.1

v0.5.0

v0.4.8

v0.4.7

v0.4.6

v0.4.5

v0.4.4

v0.4.3

v0.4.2

v0.4.1

v0.4.0

v0.3.35

v0.3.34

v0.3.33

v0.3.32

v0.3.31

v0.3.30

v0.3.29

v0.3.28

v0.3.27

v0.3.26

v0.3.25

v0.3.24

v0.3.23

v0.3.22

v0.3.21

v0.3.20

v0.3.19

v0.3.18

v0.3.17

v0.3.16

v0.3.15

v0.3.14

v0.3.13

v0.3.12

v0.3.11

v0.3.10

v0.3.9

v0.3.8

v0.3.7

v0.3.6

v0.3.5

v0.3.4

v0.3.3

v0.3.2

v0.3.1

v0.3.0

v0.2.5

v0.2.4

v0.2.3

v0.2.2

v0.2.1

v0.2.0

v0.1.125

v0.1.124

v0.1.123

v0.1.122

v0.1.121

v0.1.120

v0.1.119

v0.1.118

v0.1.117

v0.1.116

v0.1.115

v0.1.114

v0.1.113

v0.1.112

v0.1.111

v0.1.110

v0.1.109

v0.1.108

v0.1.107

v0.1.106

v0.1.105

v0.1.104

v0.1.103

v0.1.102

Labels

Clear labels

bug

confirmed

confirmed issue

core

documentation

enhancement

good first issue

help wanted

non-core

pull-request

Mirrored from GitHub Pull Request

python

question

testing wanted

No Label pull-request

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

GiteaMirror ninjasurge

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/open-webui#25193