under current LDAP configuration notes, I can see that groups must have unique_member_attribute (default is uniqueMember) which contains full DNs of the members. What if I have a different LDAP schema? I can override the unique_member_atttribute name, but not the contents. What if I store uid’s and not full DNs there? Is there any way to customize this?
AFAIK, the 2 most common openLDAP configurations are memberOf overlay and POSIX groups (memberUid attribute). I’m using the latter and so far have had no issues integrating LDAP with most tooling, like Jenkins, Rundeck. I can see that your current search string is:
uniqueMember attribute has been adapted to be customisable already. Would it make any sense to be able customize the whole search string? Or maybe have some logic to search by DN if unique_member_atttribute is set to uniqueMember and to uid if it’s set to memberUid.
How about switching uniqueMember=cn=Name Surname,ou=user,dc=domain,dc=com to memberUid=uid=name.surname when configuration item unique_member_atttribute is set to memberUid ?