Add support for handling Active Directory member attribute with Range suffix
- 主要语言
- Ruby
- 星标
- 158
- 派生
- 28
- PR 合并指标
- 30 天内没有已合并 PR
描述
[Depending on a `MaxValRange` setting on an Active Directory server](https://support.microsoft.com/ja-jp/kb/2009267), the server can return the `member;Range=[low]-[high]` (e.g. `member;Range=0-1499`) attribute including certain number of users instead of the `member` attribute including all users when a number of users in a group exceeds the `MaxValRange` value.
Since the filters in the [lib/github/ldap/filter.rb](https://github.com/github/github-ldap/blob/b75ef743fd68c8df51194a56a44db5c009831261/lib/github/ldap/filter.rb#L9) don't care the `member` attribute with the `Range` suffix, no users can be found.
The filter should be able to handle the `member` attribute with the `Range` suffix and also it needs to support pagination if the `Range` suffix exists.
贡献指南
调研方向
从 lib/github/ldap/filter.rb 第 9 行附近开始,这里 LDAP 过滤器目前会处理 member 属性。重现或检查包含 member;Range 后缀的响应,并确定应如何对范围结果进行分页。完成标准是能够搜索超过 Active Directory 的 MaxValRange 的组,并找到所有适用的用户。
由索引模型根据 Issue 内容生成。
评估
- 技术栈
- ruby
- 领域
- authentication
- Issue 类型
- 功能
- 难度
- 4/5
- 预计耗时
- 3-5 天
- 活跃度
- 停滞
- 描述清晰度
- 基本清楚
- 新手友好度
- 35/100