Valentin Tolmer
8f04843466
ldap: Simplify boolean expressions derived from filters
2025-09-16 01:58:41 +02:00
Hobbabobba
400beafb29
example_config: Add pocket-id
2025-09-16 01:40:08 +02:00
dependabot[bot]
963e58bf1a
build(deps): bump tracing-subscriber from 0.3.18 to 0.3.20
...
Bumps [tracing-subscriber](https://github.com/tokio-rs/tracing ) from 0.3.18 to 0.3.20.
- [Release notes](https://github.com/tokio-rs/tracing/releases )
- [Commits](https://github.com/tokio-rs/tracing/compare/tracing-subscriber-0.3.18...tracing-subscriber-0.3.20 )
---
updated-dependencies:
- dependency-name: tracing-subscriber
dependency-version: 0.3.20
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-09-16 01:10:06 +02:00
Kumpelinus
176c49c78d
chore: upgrade Rust toolchain to 1.89 and modernize code with let-chains
2025-09-16 00:48:16 +02:00
Copilot
3d5542996f
chore: Add CodeRabbit configuration to reduce agent verbosity
2025-09-16 00:12:45 +02:00
psentee
4590463cdf
auth: serialize exp and iat claims as NumericDate to comply with RFC7519 ( #1289 )
...
Add `jti` claim to the JWT to avoid hashing collisions
2025-09-15 17:24:59 +02:00
lordratner
85ce481e32
Update opnsense.md
...
Added instruction for using/not using Constraint Groups. This option is selected by default and the current instructions do not address it, but if it is left on and the Authentication Containers are not updated, the group sync will fail.
2025-09-14 15:53:05 +02:00
Valentin Tolmer
f64f8625f1
Add username to password recovey emails
2025-09-14 15:44:37 +02:00
Alexandre Foley
c68f9e7cab
example_configs: fix the quadlet readme
...
Several "podman" command should have been "systemctl" from the start.
2025-09-04 22:23:12 +02:00
Copilot
775c5c716d
server: gracefully shut down database connection pool
2025-09-04 09:19:03 +02:00
Kumpelinus
89cb59919b
server: Add modifyTimestamp and pwdChangedTime attributes ( #1265 )
...
Add a modifyTimestamp attribute to LDAP entries for users and groups, and expose pwdChangedTime for users.
These attributes let clients track when an entry (or its password) was last changed.
- modifyTimestamp is a server-maintained attribute that updates on any write to user or group entries, including membership changes (on the group side).
- pwdChangedTime is set when a user’s password is created or changed.
2025-08-31 14:56:07 +02:00
Valentin Tolmer
267f08f479
github: Remove CODEOWNERS
2025-08-21 22:11:35 +02:00
copilot-swe-agent[bot]
b370360130
Add memberOf attribute definition to LDAP schema
2025-08-21 22:07:02 +02:00
Valentin Tolmer
7438fe92cf
github: pin the CI rust version to 1.85.0
2025-08-21 02:24:05 +02:00
copilot-swe-agent[bot]
cd2694d7dc
Add comprehensive GitHub Copilot instructions for LLDAP repository
...
Add copilot-setup-steps.yml for GitHub Copilot agent environment setup
2025-08-21 01:22:31 +02:00
Valentin Tolmer
5e83ed8eb0
release: v0.6.2
v0.6.2
2025-08-18 00:06:44 +02:00
Kirill Zhuravlev
c69957690e
docs: avoid bad-sounding words in secrets example
2025-08-17 23:10:45 +02:00
Linus Astel
7ef2af8beb
devcontainer: Bump Rust version
2025-08-14 22:38:45 +02:00
Toby
5c9897b156
ldap: Add missing subschema entries
2025-08-14 16:04:28 +02:00
ibizaman
0b720aa082
bootstrap: fine grained cleanup
2025-08-13 09:36:21 +02:00
dependabot[bot]
3e7277e77d
build(deps): bump actions/checkout from 4.2.2 to 5.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.2.2 to 5.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4.2.2...v5.0.0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-12 08:02:59 +02:00
ibizaman
5241626a3a
bootstrap: make password_file a standard custom attribute
...
Otherwise the bootstrap script tries to create the password_file
as a custom attribute which fails since it's not in the schema.
And anyway, it shouldn't be in the schema.
2025-08-06 22:13:22 +02:00
Valentin Tolmer
363ef106e2
app: Fix attribute type parsing
2025-07-30 01:02:47 +02:00
ibizaman
3c7e4c3dec
bootstrap: do not leak password in process list
2025-07-22 08:51:35 +02:00
Valentin Tolmer
fa196a9fd9
docker: try several GPG server
...
Sometimes the docker build fails because the gpg server is intermittently unavailable
2025-07-22 01:10:25 +02:00
ibizaman
f02b365478
bootstrap: do not fail if no user or group defined
2025-07-21 23:35:49 +02:00
Valentin Tolmer
0b0e6ae2cd
github: Fix warnings about Dockerfile syntax
2025-07-21 23:23:37 +02:00
Valentin Tolmer
da525fc99b
app: simplify attribute_type handling, display creation time in user details
...
In the user table it's still only the date, but that makes sense for an overview
2025-07-21 23:15:46 +02:00
ibizaman
78337bce72
bootstrap: allow to give password from a file
2025-07-16 23:51:21 +02:00
selfhoster1312
87e9311a44
meta: Fix cargo clippy failures (format strings)
2025-07-16 23:23:08 +02:00
Hendrik Sievers
53e62ecf5a
docs: move authelia configuration to markdown file ( #1205 )
2025-07-13 22:29:09 +02:00
core
10d33a7537
readme: fix broken Iink
2025-07-11 00:52:03 +02:00
copilot-swe-agent[bot]
ada438398e
set-password: load system certificates
...
Fixes #1206
2025-07-08 22:46:13 +02:00
selfhoster1312
8c65d8958a
docs: Add FAQ about sustainability and professional support contracts ( #1200 )
2025-07-06 23:55:08 +02:00
Toby
f8cd7ad023
server, ldap: add support for Subschema requests ( #1071 )
...
Add a subschema entry to the rootDSE, which shows all attributes and
objectclasses present on the LLDAP server, which is needed for some
applications that need to index the LDAP server. The current
implementation's goal is to have a bare minimum working subschema which
follows the LDAP RFC. It also updates the GraphQL interface to follow
the changes that have been made in actually separating out
objectclasses, instead of having them as an attribute.
Co-authored-by: nitnelave <valentin@tolmer.fr >
2025-07-06 23:42:53 +02:00
selfhoster1312
823adcefd0
docs: Document (lack of) vhosts support ( #1201 )
2025-07-06 23:32:28 +02:00
selfhoster1312
5b120a5958
docs: Split README into smaller files ( #1198 )
2025-07-06 23:12:48 +02:00
Alexandre Foley
c658666b3f
example_configs: Quadlet documentation and improvements
2025-06-30 19:47:32 +02:00
PHIDIAS
7a5a88384d
example_configs: add Mailcow ( #1188 )
2025-06-06 19:13:26 +02:00
Jona Joachim
4eb4fae49c
example_configs: wiki_js: Add missing closing curly brackets to filter
2025-06-02 12:55:48 +02:00
Bryan Alves
58b028ad5f
example_configs: fix Authelia OU for helm installations
...
Authelia when installed via helm by default looks for users
in the `Users` OU. It supports changing this configuration via the
`additional_users_dn` property. Set this to match what lldap expects.
2025-06-01 09:11:21 +02:00
Josh Thorpe
612bce48ad
example_configs: fix overly-permissive next loud config
...
Any LLDAP user, not just members of nextcloud-users, could log in and get an instance. However, they weren't synchronized to the nextcloud admin view and thus were nearly invisible.
2025-05-30 10:23:07 +02:00
aokblast
1b5f6bfa66
example_configs: correct the manual for pkg support in FreeBSD
2025-05-19 20:28:23 +02:00
Nick
5913d81a44
chore: upgrade top level docker alpine version
2025-05-19 08:13:01 +02:00
sdelnevo
cb9fd38271
example_configs: Add UnifiOS Directory
2025-05-17 23:34:53 +02:00
ChibyX
97bcfd1a99
example_configs: Add Peertube
2025-05-16 16:11:38 +02:00
Christian Medel
7330496a77
example_configs: Add Snipe-IT
2025-05-14 23:50:17 +09:00
MikaelUrankar
0baee7a120
Readme: Fix typo
...
s#LLDPA#LLDAP#g
2025-05-09 22:03:37 +09:00
broemp
0a5b2d4c46
example_configs: Change Grocy example config Port
2025-05-04 09:04:45 +09:00
cogdavid
9978111bec
example_configs: fix dovecot example
...
ACCOUNT_PROVISIONER=LDAP is supported and indeed necessary for ldap integration - however quotas must be explicitly disabled with ENABLE_QUOTAS=0
2025-04-27 06:03:16 +09:00