-
-
Notifications
You must be signed in to change notification settings - Fork 1.5k
Description
Is your feature request related to a problem? Please describe.
We are using as our LDAP server in combination with Authentik. Currently, the check_connection function in Authentik expects the LDAP server_info response to include the attributes vendor_name and vendor_version.
When these fields are absent (as is the case with Glauth), check_connection fails with an exception. Moreover, repeated attempts result in multiple unclosed connections to the LDAP server, potentially exhausting file descriptors and resources.
Describe the solution you'd like
Introduce configuration options to make the vendor_name and vendor_version fields optional in check_connection. Authentik should be able to gracefully handle the absence of these attributes, either by skipping the check or by using default/fallback values.
Additional context
Improves compatibility with LDAP servers that do not provide vendor_name or vendor_version (like Glauth).
Prevents resource exhaustion caused by repeated failed connection attempts.
Enhances stability and flexibility of Authentik in diverse LDAP environments.