Initial commit (history squashed)

etc/authority.plugins/ldap.yaml

@@ -0,0 +1,17 @@
+# Placeholder configuration for the LDAP identity provider plug-in.
+# Replace values with your directory settings before enabling the plug-in.
+connection:
+  host: "ldap.example.com"
+  port: 636
+  useTls: true
+  bindDn: "cn=service,dc=example,dc=com"
+  bindPassword: "CHANGE_ME"
+
+queries:
+  userFilter: "(uid={username})"
+  groupFilter: "(member={distinguishedName})"
+  groupAttribute: "cn"
+
+capabilities:
+  supportsPassword: true
+  supportsMfa: false