goauthentik / goauthentik/authentik

[Feature][LDAP outpost] Add support for takObjectClass

Open
#15,111 2 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Python
Stars
25.6k
Forks
2k
Avg merge
1d 4h
Merged PRs (30d)
634

Description

The US military's TAK ecosystem (TAK server, ATAK, WinTAK) is gaining popularity fast outside the military, e.g. in EMS, search and rescue, even hiking. TAK server allows for LDAP authentication which is quite nice because the native user management is kinda a mess. Authentic already supports LDAP groups and the memberOf extension. The only thing missing for TAK server compatibility (as far as I understand) would be a schema extension for the attributes takCallSign, takColor and takRole in takObjectClass. Example LDIF here: https://github.com/takcluster/takserver-ldap/blob/main/mod_schema.ldif

It would be awesome if that could be added along the way of improving Authentik.

Contributor guide

Open the contributing guide

Research direction

Start by reviewing the linked takserver-ldap mod_schema.ldif and Authentik's existing LDAP groups and memberOf support. Identify where LDAP schema extensions are defined, then verify that takObjectClass exposes takCallSign, takColor, and takRole for TAK Server compatibility.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
authentication, backend
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.