Supporting LDAP group attribute member attribute instead of user attribute memberof for authentication

Dear developers,

In our company we use OpenLDAP without the memberof user attribute because it is not supported.

LDAP by default (see RFC https://datatracker.ietf.org/doc/html/rfc4519#section-2.17) defines only a member attribute on groups and not a memberof attribute on users.

As we have no control over the companys LDAP configuration but need to authorize by LDAP groups in harbor, its important for us that the member group attributes gets supported in harbor. Memberof overlays are no option for us.

I have seen that there is MR for this feature, but it has not been approved or enhanced.

We would like to have this feature, as it is crucial for us to use the harbor registry in an enterprise environment.

Best, Oliver

Sources:

https://stackoverflow.com/questions/22003134/is-there-an-ldap-standard-group-membership-attribute-for-users https://github.com/goharbor/harbor/issues/9328 https://github.com/goharbor/harbor/pull/13501 https://datatracker.ietf.org/doc/html/rfc4519#section-2.17