privacyidea-ldap-proxy
privacyidea-ldap-proxy copied to clipboard
Be able to configure multiple service accounts for different purposes
Right now, we use the service account specified in [service-account]
for two purposes:
- If
bind-service-account
is set totrue
, a bind request that was authenticated successfully against privacyIDEA will result in a bind request using the service account credentials against the LDAP backend. This makes it possible to perform searches (ifallow-searches
is alsotrue
). - The
lookup
user mapping strategy uses the service account credentials to look up usernames.
Maybe we should make it possible to use different service account credentials here?
If there are different applications connected to the LDAP proxy, this exspecially seems to make sense...