wiki-v1 icon indicating copy to clipboard operation
wiki-v1 copied to clipboard

Support Samba4 AD ldap users without "email" attribute

Open tanertas opened this issue 7 years ago • 2 comments

Actual behavior

Wiki.js doesn't allow login if there's no email attribute for ldap user.

Expected behavior

Wiki.js should able to map "userprincipalname" attribute to "email" thus allow AD users without "email" attribute but "userprincipalname" instead.

Steps to reproduce the behavior

Configure wiki for ldap auth using Samba4 AD with no "email" attribute then try to login.

tanertas avatar Nov 12 '18 13:11 tanertas

Does userprincipalname contain an email though? It can be located in any field, but an email is required.

NGPixel avatar Nov 13 '18 16:11 NGPixel

Yes, userprincipalname contains an email for related domain which is basically in form of samaccountname@fqdn. I think we should at least have a config option for which ldap field is going to be assigned for "email".

tanertas avatar Nov 14 '18 02:11 tanertas