Skip to content

Please make vendor_name and vendor_version optional in check_connection for LDAP integrations #16837

@vic164

Description

@vic164

Is your feature request related to a problem? Please describe.

We are using as our LDAP server in combination with Authentik. Currently, the check_connection function in Authentik expects the LDAP server_info response to include the attributes vendor_name and vendor_version.
When these fields are absent (as is the case with Glauth), check_connection fails with an exception. Moreover, repeated attempts result in multiple unclosed connections to the LDAP server, potentially exhausting file descriptors and resources.

Describe the solution you'd like

Introduce configuration options to make the vendor_name and vendor_version fields optional in check_connection. Authentik should be able to gracefully handle the absence of these attributes, either by skipping the check or by using default/fallback values.

Additional context

Improves compatibility with LDAP servers that do not provide vendor_name or vendor_version (like Glauth).
Prevents resource exhaustion caused by repeated failed connection attempts.
Enhances stability and flexibility of Authentik in diverse LDAP environments.

Metadata

Metadata

Assignees

Labels

enhancementNew feature or requestenhancement/confirmedEnhancements that will be implemented in the future

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions