goauthentik / goauthentik/authentik
[Feature][LDAP outpost] Add support for takObjectClass
- Dominant language
- Python
- Stars
- 25.6k
- Forks
- 2k
- Avg merge
- 1d 4h
- Merged PRs (30d)
- 634
Description
The US military's TAK ecosystem (TAK server, ATAK, WinTAK) is gaining popularity fast outside the military, e.g. in EMS, search and rescue, even hiking. TAK server allows for LDAP authentication which is quite nice because the native user management is kinda a mess. Authentic already supports LDAP groups and the memberOf extension. The only thing missing for TAK server compatibility (as far as I understand) would be a schema extension for the attributes takCallSign, takColor and takRole in takObjectClass. Example LDIF here: https://github.com/takcluster/takserver-ldap/blob/main/mod_schema.ldif
It would be awesome if that could be added along the way of improving Authentik.
Contributor guide
Research direction
Start by reviewing the linked takserver-ldap mod_schema.ldif and Authentik's existing LDAP groups and memberOf support. Identify where LDAP schema extensions are defined, then verify that takObjectClass exposes takCallSign, takColor, and takRole for TAK Server compatibility.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- authentication, backend
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100