Supporting LDAP group attribute member attribute instead of user attribute memberof for authentication
#16,918 opened on May 27, 2022
Repository metrics
- Stars
- (28,490 stars)
- PR merge metrics
- (Avg merge 8d 17h) (74 merged PRs in 30d)
Description
Dear developers,
In our company we use OpenLDAP without the memberof user attribute because it is not supported.
LDAP by default (see RFC https://datatracker.ietf.org/doc/html/rfc4519#section-2.17) defines only a member attribute on groups and not a memberof attribute on users.
As we have no control over the companys LDAP configuration but need to authorize by LDAP groups in harbor, its important for us that the member group attributes gets supported in harbor. Memberof overlays are no option for us.
I have seen that there is MR for this feature, but it has not been approved or enhanced.
We would like to have this feature, as it is crucial for us to use the harbor registry in an enterprise environment.
Best, Oliver
Sources:
https://stackoverflow.com/questions/22003134/is-there-an-ldap-standard-group-membership-attribute-for-users https://github.com/goharbor/harbor/issues/9328 https://github.com/goharbor/harbor/pull/13501 https://datatracker.ietf.org/doc/html/rfc4519#section-2.17