mirror of
https://github.com/zulip/zulip.git
synced 2026-06-12 21:00:58 +08:00
7788ce98e9
Closes #35196. In #34850 we implemented this for the ldap authentication codepath. This PR makes it support also during the sync_ldap_user_data job. What this means practically is that if this functionality is enabled and correctly configured, sync_ldap_user_data is able to find the associated user in the ldap directory even if the email value in the directory has changed. The UserProfile's delivery_email will be updated to sync this change, in addition to the regular syncing for other attributes. Email changes used to break the association between UserProfile and the ldap user entry. The primary challenge making this implementation fairly complex is the fact that django-auth-ldap is designed with authentication in mind, so it doesn't make arbitrary LDAP searches easy - and the regular direction is: user ldap credentials -> LDAP user data -> Django user object. However, the sync job searches in the opposite direction. We begin with a Django UserProfile - we need to find the ExternalAuthID entry (if it exists), and then based on the configuration of this feature, do an appropriate LDAP search to find the LDAP user entry with the matching value in the attribute configured as the `unique_account_id`. |
||
|---|---|---|
| .. | ||
| ai-integrations.md | ||
| authentication-methods.md | ||
| deployment.md | ||
| email-gateway.md | ||
| email.md | ||
| export-and-import.md | ||
| gif-picker-integrations.md | ||
| index.md | ||
| install-existing-server.md | ||
| install.md | ||
| maintain-secure-upgrade.md | ||
| management-commands.md | ||
| mobile-push-notifications.md | ||
| modify.md | ||
| multiple-organizations.md | ||
| password-strength.md | ||
| postgresql-support-table.md | ||
| postgresql.md | ||
| requirements.md | ||
| reverse-proxies.md | ||
| scim.md | ||
| securing-your-zulip-server.md | ||
| settings.md | ||
| ssl-certificates.md | ||
| system-configuration.md | ||
| troubleshooting.md | ||
| upgrade.md | ||
| upload-backends.md | ||
| video-calls.md | ||