LDAP Group Authorization with uniqueMember

[MaiTaiSon]

Issue submitter TODO list

• I've searched for an already existing issues here
• I'm running a supported version of the application which is listed here and the feature is not present there

Is your proposal related to a problem?

I set up groups with group member attribute is "uniqueMember". When I check log in Kafka UI, it current check with member attribute is "member"
DEBUG [boundedElastic-1[] o.s.l.c.LdapTemplate: Executing search with base [ou=groups,dc=dc0,dc=dc1] and filter [(member=cn=user,ou=users,dc=dc0,dc=dc1)]
Please allow to config this configuration for ldap. Thanks

Describe the feature you're interested in

Allow to config LDAP group member attribute

Describe alternatives you've considered

No response

Version you're running

1.3.0

Additional context

No response

[github-actions]

Hi MaiTaiSon! 👋

Welcome, and thank you for opening your first issue in the repo!

Please wait for triaging by our maintainers.

As development is carried out in our spare time, you can support us by sponsoring our activities or even funding the development of specific issues.
Sponsorship link

If you plan to raise a PR for this issue, please take a look at our contributing guide.

[Haarolean]

What's your config? Have you tried overriding this?

[kapybro]

Further user feedback is requested. Please reply within 7 days or we might close the issue.

[MaiTaiSon]

What's your config? Have you tried overriding this?

Tks for your response!

The config use for filter user, i don't need that. In my case, the library trying to find ldap groups with base ou=groups,dc=dc0,dc=dc1 which have [member=cn=user,ou=users,dc=dc0,dc=dc1], but i want to find ldap group which have [uniqueMember=cn=user,ou=users,dc=dc0,dc=dc1]. Therefore Kafbat can't find groups to match with authorization, now I only authorize successfully with username. So I need a configuration for change default filter attribute from member -> uniqueMember

Anyway, this is my config:
urls: ldap_url
base: "cn={0},ou=users,dc=dc0,dc=dc1"
admin-user: ldap_user
admin-password: ldap_password
group-filter-search-base: "ou=groups,dc=dc0,dc=dc1"

[kapybro]

Thanks for the additional feedback! We'll get back to your issue soon.

[Haarolean]

That's a part of group filter, which we use only for RBAC, not auth. Do you experience issues with RBAC or the authentication? Bc it will affect only RBAC groups matching, not auth per se.