nitnelave

I think in that scenario the user would log in and immediately be sent a password reset email and get logged out. So an attacker could at most trigger a...

Thinking more about it, this could be a good candidate for a plugin, see #714

I think this is the kind of question for which there is no one-size-fits-all solution, and especially small self-hosted servers don't need password policies. The way I picture it, it...

I'd still wager that they have fewer users than services and they know all of them by first name :D Part of the expectation of a homelab service is that...

Why can't you delete the user? Why do you need to keep them around? Do you have many cases where a disabled user has to be re-enabled? I'm a bit...

Just a small update on my position on this feature: I'm not against, but it's not targeting the core user base of the project, small self-hosted homelabs. The feature seems...

I think making the web UI extensible is going to be another whole can of worms that I don't want to get into. I was more thinking of plugins as...

FYI, I'm exploring what a plugin API would look like in https://github.com/nitnelave/lldap_plugin_poc, feel free to leave some comments in issues/discussions there, or just on discord in the #development channel.

Congratulations, you are just in time! It became technically possible yesterday, after a long period of work on #67 . However, the web ui doesn't support it yet, so the...

Thanks! A couple of points that are nice to highlight: - attribute names should be case insensitive: we implement that by matching on the lowercase version of the attribute. However,...