kolaenteandTink 33bd1c9afe feat(ldap): match users and groups by an immutable directory id ...

Add auth.ldap.attribute.id. When set (e.g. objectGUID on AD, entryUUID
on OpenLDAP), users and teams are matched by that attribute instead of
the login name and the group DN, so renaming or moving them in the
directory no longer creates duplicate accounts or new teams without the
old shares.

AD's binary objectGUID is formatted as a canonical GUID string; other
attributes must be printable text. Existing accounts and teams are
switched to the new id on the next login. An empty option keeps the old
behaviour.

2026-10-19 13:42:19 +02:00

..

ldap

…

oauth2server

…

openid

…

auth_context_test.go

…

auth_test.go

…

auth.go

…