goauthentik / goauthentik/authentik

Partial LDAP sync for one OU or one user

Open
#25,275 0 comments 1 reaction 0 assignees View on GitHub
enhancement enhancement/confirmed
Dominant language
Python
Stars
25.6k
Forks
2k
Avg merge
1d 4h
Merged PRs (30d)
634

Description

## What

trigger a partial / targeted LDAP sync (one OU / one user) instead of always syncing the whole directory.

## Want

- Trigger a partial / targeted LDAP sync (one OU / one user) instead of always syncing the whole directory

## Ideas this came from

- [#9764 An option to sync LDAP sources partially](https://github.com/goauthentik/authentik/issues/9764) — We've been trying out Authentik for a while now and we're currently looking to integrate it within our current setup. We have an existing OpenLDAP service and w
- [#12134 Extend management commands to support "targeted" LDAP sync](https://github.com/goauthentik/authentik/issues/12134) — Authentik provides Django management commands for triggering an LDAP sync (implementend in authentik/sources/ldap/management/commands/ldapsync.py). These can on

Contributor guide

Open the contributing guide

Research direction

Start by reading authentik/sources/ldap/management/commands/ldapsync.py and the linked issues #9764 and #12134 to understand the existing full-directory sync and requested targeting. Done means a sync can be triggered for one OU or one user instead of always processing the whole directory.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
authentication
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Active
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.