As requested by @nitnelave, the password reset email now includes both the display name for personalization and the username for recovery. The email uses the display name in the greeting when available, but always shows the username explicitly for recovery purposes.
Co-authored-by: nitnelave <796633+nitnelave@users.noreply.github.com>
Add a modifyTimestamp attribute to LDAP entries for users and groups, and expose pwdChangedTime for users.
These attributes let clients track when an entry (or its password) was last changed.
- modifyTimestamp is a server-maintained attribute that updates on any write to user or group entries, including membership changes (on the group side).
- pwdChangedTime is set when a user’s password is created or changed.
Otherwise the bootstrap script tries to create the password_file
as a custom attribute which fails since it's not in the schema.
And anyway, it shouldn't be in the schema.
Add a subschema entry to the rootDSE, which shows all attributes and
objectclasses present on the LLDAP server, which is needed for some
applications that need to index the LDAP server. The current
implementation's goal is to have a bare minimum working subschema which
follows the LDAP RFC. It also updates the GraphQL interface to follow
the changes that have been made in actually separating out
objectclasses, instead of having them as an attribute.
Co-authored-by: nitnelave <valentin@tolmer.fr>
Authelia when installed via helm by default looks for users
in the `Users` OU. It supports changing this configuration via the
`additional_users_dn` property. Set this to match what lldap expects.
Any LLDAP user, not just members of nextcloud-users, could log in and get an instance. However, they weren't synchronized to the nextcloud admin view and thus were nearly invisible.
* Include custom attributes when bootstrapping user and group configs
* Fix logic to detect user/group config without custom attributes
* Increase readability of query definition using a heredoc
* Remove duplicate query variables and improve readability
* Revert "Increase readability of query definition using a heredoc"
This reverts commit 7a73dacc21.
* example_config: moving nslcd old guide to NSLCD.md
* example_config: creating README for SSSD
* example_config: creating sssd.conf
* example_config: removing explicit links and adding a reference to the old NSLCD guide
* example_config: fixing images in pam README
* example_config: add how to enable automatic home directory creation
* example_config: fixing typo in command to edit ssh config
* example_config: using commments instead of line numbers for the example sssd.conf file
---------
Co-authored-by: nitnelave <valentin@tolmer.fr>
