owncloud / owncloud/ocis

The buildin IDP doesn't honor `OCIS_LDAP_DISABLE_USER_MECHANISM`

Open
#6,517 1 comment 0 reactions 0 assignees View on GitHub
Type:Bug
Dominant language
Go
Stars
2.1k
Forks
274
Avg merge
2d 1h
Merged PRs (30d)
103

Description

## Describe the bug

The builtin IDP doesn't honor `OCIS_LDAP_DISABLE_USER_MECHANISM`. So `OCIS_LDAP_DISABLE_USER_MECHANISM=none` does not work when using the internal IDP. It defaults to the `OCIS_LDAP_DISABLE_USER_MECHANISM=attribute`. Which makes integration with external LDAP servers somewhat tricky. It's possible to workaround this by settings `OCIS_LDAP_USER_ENABLED_ATTRIBUTE=""` but that's inconsitent with how the other service are configured.

The IDP should at least support `none` and `attribute` for `OCIS_LDAP_DISABLE_USER_MECHANISM`. I think we should not implement `OCIS_LDAP_DISABLE_USER_MECHANISM=group` in the IDP for now. (If anything we should error out if `OCIS_LDAP_DISABLE_USER_MECHANISM` set to something else than `none` or `attribute`.

This is a follow up to https://github.com/owncloud/ocis/issues/6513

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.