goauthentik/authentik

Nested user attributes not exposed as valid LDAP attributes in LDAP Outpost

開放

#16,954 建立於 2025年9月23日

 (2 則留言) (0 個反應) (0 位負責人)Python (319 個分叉)batch import
bugbug/confirmedgood first issue

倉庫指標

星標
 (4,050 顆星)
PR 合併指標
 (平均合併 4天 6小時) (30 天內合併 627 個 PR)

描述

Describe the bug When exposing custom attributes via the LDAP outpost, nested attributes are not returned as individual LDAP attributes. Instead, they appear in a serialized map format that does not seem to comply with LDAP.

To Reproduce Steps to reproduce the behavior:

  1. Configure a user in Authentik with a custom attribute containing nested values, e.g. settings.locale = en.
  2. Query the user via the LDAP outpost using ldapsearch.
  3. Inspect the LDAP response.

See that the attribute is returned as a serialized map string rather than as a proper multi-valued LDAP attribute.

Expected behavior I would expect the LDAP outpost to flatten or map the nested attribute into standard LDAP attributes, for example:

settingsLocale: en

or

settings.locale: en

instead of:

settings: map[locale:en]

Version and Deployment (please complete the following information):

  • authentik version: 2025.8.3
  • Deployment: Docker

Additional context Add any other context about the problem here.

貢獻者指南