bf5b76269f
server: Refactor config_overrides to use Option::inspect
...
To reduce cyclomatic complexity.
2025-10-12 20:14:20 +02:00
c09e5c451c
example_configs: update SSSD guide
2025-10-11 08:39:25 +02:00
1382c67de9
server: Extract configuration utilities
2025-10-10 23:28:35 +02:00
0f8f9e1244
server: split up update_user_with_transaction
2025-10-10 09:01:52 +02:00
9a83e68667
app: Set a key for user/group creation buttons
...
That prevents them from jumping around when changing pages.
2025-10-10 00:28:11 +02:00
3f9880ec11
server: Move LDAP search tests to their respective implementation files
...
Move user and group tests to their respective implementation files
User tests → core/user.rs:
- test_search_regular_user
- test_search_readonly_user
- test_search_member_of
- test_search_user_as_scope
- test_search_users
- test_pwd_changed_time_format
Group tests → core/group.rs:
- test_search_groups
- test_search_groups_by_groupid
- test_search_groups_filter
- test_search_groups_filter_2
- test_search_groups_filter_3
- test_search_group_as_scope
Tests remain in search.rs:
- DSE/schema tests
- General search logic tests
- Filter tests
- Error handling tests
- OU search tests
- Mixed user/group tests
2025-10-10 00:21:32 +02:00
94007aee58
readme: Add a link to the configuration guide's readme
2025-10-04 23:24:46 +02:00
9e9d8e2ab5
graphql: split query.rs and mutation.rs into modular structures ( #1311 )
2025-10-04 23:09:36 +02:00
18edd4eb7d
example_configs: update portainer group membership and filter attributes
...
The current descriptions is wrong, and will make portainer try to assign "group" to be a member of "group" instead of the assign the "user" to be a part of "group"
2025-10-04 22:16:00 +02:00
3cdf2241ea
example_configs: Improve bootstrap.sh and documentation for use with Kubernetes ( #1245 )
2025-09-28 14:02:06 +02:00
9021066507
example_configs: Add configuration example for Open WebUI
...
This documents a working (LDAPS) configuration for using lldap in Open WebUI.
Environment Variables where directly taken from the logs.
The names of the GUI variables are taken from the UI.
Version v0.6.26.
The two configuration options are then put in a table and a small
elaboration + example values are provided.
Other then additionally mounting the ca chain into the container (with appropriate rights) there were not additional steps required.
The ownership of the ca chain will get changed to `chown 501:`.
2025-09-28 13:55:29 +02:00
fe063272bf
chore: add Nix flake-based development environment
...
Co-authored-by: Kumpelinus <kumpelinus@jat.de >
- Add Nix flake and lockfile for reproducible development environments
- Document Nix-based setup in `docs/nix-development.md`
- Add `.envrc` for direnv integration and update `.gitignore` for Nix/direnv artifacts
- Reference Nix setup in CONTRIBUTING.md
2025-09-28 13:51:41 +02:00
59dee0115d
example_configs: add missing fields to authentik example
2025-09-24 16:03:56 +02:00
622274cb1a
chore: fix codecov config
2025-09-22 09:34:37 +02:00
4bad3a9e69
chore: reduce codecov verbosity
2025-09-22 01:01:00 +02:00
84fb9b0fd2
Fix pwdChangedTime format to use LDAP GeneralizedTime instead of RFC3339 ( #1300 )
...
When querying for pwdChangedTime, the timestamp is returned in RFC3339 format instead of the expected LDAP GeneralizedTime format (YYYYMMDDHHMMSSZ). This causes issues when LLDAP is used with systems like Keycloak that expect proper LDAP timestamp formatting.
2025-09-22 00:42:51 +02:00
8a803bfb11
ldap: normalize base DN in LdapInfo, reduce memory usage
...
By making it a &'static, we can have a single allocation for all the threads/async contexts.
This also normalizes the whitespace from the user input; a trailing \n can cause weird issues with clients
2025-09-17 01:03:19 +02:00
f7fe0c6ea0
ldap: fix swapped filter conditions
2025-09-16 14:58:46 +02:00
8f04843466
ldap: Simplify boolean expressions derived from filters
2025-09-16 01:58:41 +02:00
400beafb29
example_config: Add pocket-id
2025-09-16 01:40:08 +02:00
963e58bf1a
build(deps): bump tracing-subscriber from 0.3.18 to 0.3.20
...
Bumps [tracing-subscriber](https://github.com/tokio-rs/tracing ) from 0.3.18 to 0.3.20.
- [Release notes](https://github.com/tokio-rs/tracing/releases )
- [Commits](https://github.com/tokio-rs/tracing/compare/tracing-subscriber-0.3.18...tracing-subscriber-0.3.20 )
---
updated-dependencies:
- dependency-name: tracing-subscriber
dependency-version: 0.3.20
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-09-16 01:10:06 +02:00
176c49c78d
chore: upgrade Rust toolchain to 1.89 and modernize code with let-chains
2025-09-16 00:48:16 +02:00
3d5542996f
chore: Add CodeRabbit configuration to reduce agent verbosity
2025-09-16 00:12:45 +02:00
4590463cdf
auth: serialize exp and iat claims as NumericDate to comply with RFC7519 ( #1289 )
...
Add `jti` claim to the JWT to avoid hashing collisions
2025-09-15 17:24:59 +02:00
85ce481e32
Update opnsense.md
...
Added instruction for using/not using Constraint Groups. This option is selected by default and the current instructions do not address it, but if it is left on and the Authentication Containers are not updated, the group sync will fail.
2025-09-14 15:53:05 +02:00
f64f8625f1
Add username to password recovey emails
2025-09-14 15:44:37 +02:00
c68f9e7cab
example_configs: fix the quadlet readme
...
Several "podman" command should have been "systemctl" from the start.
2025-09-04 22:23:12 +02:00
775c5c716d
server: gracefully shut down database connection pool
2025-09-04 09:19:03 +02:00
89cb59919b
server: Add modifyTimestamp and pwdChangedTime attributes ( #1265 )
...
Add a modifyTimestamp attribute to LDAP entries for users and groups, and expose pwdChangedTime for users.
These attributes let clients track when an entry (or its password) was last changed.
- modifyTimestamp is a server-maintained attribute that updates on any write to user or group entries, including membership changes (on the group side).
- pwdChangedTime is set when a user’s password is created or changed.
2025-08-31 14:56:07 +02:00
267f08f479
github: Remove CODEOWNERS
2025-08-21 22:11:35 +02:00
b370360130
Add memberOf attribute definition to LDAP schema
2025-08-21 22:07:02 +02:00
7438fe92cf
github: pin the CI rust version to 1.85.0
2025-08-21 02:24:05 +02:00
cd2694d7dc
Add comprehensive GitHub Copilot instructions for LLDAP repository
...
Add copilot-setup-steps.yml for GitHub Copilot agent environment setup
2025-08-21 01:22:31 +02:00
5e83ed8eb0
release: v0.6.2
2025-08-18 00:06:44 +02:00
c69957690e
docs: avoid bad-sounding words in secrets example
2025-08-17 23:10:45 +02:00
7ef2af8beb
devcontainer: Bump Rust version
2025-08-14 22:38:45 +02:00
5c9897b156
ldap: Add missing subschema entries
2025-08-14 16:04:28 +02:00
0b720aa082
bootstrap: fine grained cleanup
2025-08-13 09:36:21 +02:00
3e7277e77d
build(deps): bump actions/checkout from 4.2.2 to 5.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.2.2 to 5.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4.2.2...v5.0.0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-12 08:02:59 +02:00
5241626a3a
bootstrap: make password_file a standard custom attribute
...
Otherwise the bootstrap script tries to create the password_file
as a custom attribute which fails since it's not in the schema.
And anyway, it shouldn't be in the schema.
2025-08-06 22:13:22 +02:00
363ef106e2
app: Fix attribute type parsing
2025-07-30 01:02:47 +02:00
3c7e4c3dec
bootstrap: do not leak password in process list
2025-07-22 08:51:35 +02:00
fa196a9fd9
docker: try several GPG server
...
Sometimes the docker build fails because the gpg server is intermittently unavailable
2025-07-22 01:10:25 +02:00
f02b365478
bootstrap: do not fail if no user or group defined
2025-07-21 23:35:49 +02:00
0b0e6ae2cd
github: Fix warnings about Dockerfile syntax
2025-07-21 23:23:37 +02:00
da525fc99b
app: simplify attribute_type handling, display creation time in user details
...
In the user table it's still only the date, but that makes sense for an overview
2025-07-21 23:15:46 +02:00
78337bce72
bootstrap: allow to give password from a file
2025-07-16 23:51:21 +02:00
87e9311a44
meta: Fix cargo clippy failures (format strings)
2025-07-16 23:23:08 +02:00
53e62ecf5a
docs: move authelia configuration to markdown file ( #1205 )
2025-07-13 22:29:09 +02:00
10d33a7537
readme: fix broken Iink
2025-07-11 00:52:03 +02:00
Copilot