Summary

The current LDAP config requires the LDAP_BIND_DN and LDAP_BIND_CREDENTIALS to be setup, which means a new service account needs to be created. This shouldn't be necessary though, since we can have the same feature set by bind directly using the users provided credentials during login.

This PR adds a new environment variable LDAP_BIND_DN_TEMPLATE that can be used to configure the required search to perform during binding to successfully authenticate and search for the user details. The environment variables LDAP_BIND_DN and LDAP_BIND_CREDENTIALS must not be set in order for the template method to run instead.

For example:

LDAP_BIND_DN_TEMPLATE=uid={{username}},ou=users,dc=somedomain,dc=com

Change Type

Please delete any irrelevant options.

• New feature (non-breaking change which adds functionality)
• This change requires a documentation update

Testing

Please describe your test process and include instructions so that we can reproduce your test. If there are any important variables for your testing configuration, list them here.

Test Configuration:

Checklist

Please delete any irrelevant options.

• My code adheres to this project's style guidelines
• I have performed a self-review of my own code
• I have commented in any complex areas of my code
• I have made pertinent documentation changes
• My changes do not introduce new warnings
• I have written tests demonstrating that my changes are effective or that my feature works
• Local unit tests pass with my changes
• Any changes dependent on mine have been merged and published in downstream modules.
• A pull request for updating the documentation has been submitted.