[JIRA] (IDP-1982) Add support for Dynamic Base in LDAP Connector

[Roberto Ullfig (Jira)]

Roberto Ullfig ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3Af7336e10-5995-4a2d-bd45-820a8787e304 ) *created* an issue

Identity Provider ( https://shibboleth.atlassian.net/browse/IDP?atlOrigin=eyJpIjoiNTA4MGVmZWFjN2IxNGQwMWE4OGU3YTQyZmExOGFlMzgiLCJwIjoiaiJ9 ) / New Feature ( https://shibboleth.atlassian.net/browse/IDP-1982?atlOrigin=eyJpIjoiNTA4MGVmZWFjN2IxNGQwMWE4OGU3YTQyZmExOGFlMzgiLCJwIjoiaiJ9 ) IDP-1982 ( https://shibboleth.atlassian.net/browse/IDP-1982?atlOrigin=eyJpIjoiNTA4MGVmZWFjN2IxNGQwMWE4OGU3YTQyZmExOGFlMzgiLCJwIjoiaiJ9 ) Add support for Dynamic Base in LDAP Connector ( https://shibboleth.atlassian.net/browse/IDP-1982?atlOrigin=eyJpIjoiNTA4MGVmZWFjN2IxNGQwMWE4OGU3YTQyZmExOGFlMzgiLCJwIjoiaiJ9 )

Issue Type: New Feature Affects Versions: 4.2.1, Future Assignee: Daniel Fisher ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=70121%3A5040b2f7-37ad-4449-b621-76b5c7e66a9d ) Components: LDAP Created: 27/Jul/22 3:20 PM Priority: Trivial Reporter: Roberto Ullfig ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3Af7336e10-5995-4a2d-bd45-820a8787e304 )

We'd like to request the ability to specify dynamic baseDN values for the LDAP data connector

<DataConnector...
baseDN= (currently fixed value)

To reduce query times of nested groups Microsoft AD has this feature:

"BO (fBASEONLY, 0x00000800): Specifies that the attribute is not to be returned by search operations that are not scoped to a single object. Read operations that would otherwise return an attribute that has this search flag set instead fail with operationsError / ERROR_DS_NON_BASE_SEARCH."

https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-adts/7c1cdf82-1ecc-4834-827e-d26ff95fb207

This requires a dynamic base. Currently what we do is query attributes elsewhere (perl Net::LDAP supports dynamic base) and store it in a MySQL database which then in turn is queried by the IDP. We want to cut out this middleware and query AD directly. Thanks!

( https://shibboleth.atlassian.net/browse/IDP-1982#add-comment?atlOrigin=eyJpIjoiNTA4MGVmZWFjN2IxNGQwMWE4OGU3YTQyZmExOGFlMzgiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/IDP-1982#add-comment?atlOrigin=eyJpIjoiNTA4MGVmZWFjN2IxNGQwMWE4OGU3YTQyZmExOGFlMzgiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100202- sha1:77d9f8f )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220727/615576c3/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-82c1ff00-edbe-48da-89c5-8d9cb76557f9
Type: image/png
Size: 341 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220727/615576c3/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-7990539e-66ed-441c-aa91-0ff56d594978
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220727/615576c3/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-a876d51c-aded-45d8-be00-16f61507a23c
Type: image/png
Size: 563 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220727/615576c3/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-9894bfb2-5ee7-4a44-b713-95b42fc8858e
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220727/615576c3/attachment-0007.png>