Auth: Make object_class configurable for LDAP queries and update default to 'inetOrgPerson' - refs BT#23146

Author: AngelFQC

config/authentication.dist.yaml

@@ -92,6 +92,7 @@ parameters:
                     phone: null
                     active: null
                     admin: null
+                object_class: 'inetOrgPerson'
 
             scim:
                 enabled: false

src/CoreBundle/Helpers/AuthenticationConfigHelper.php

@@ -118,6 +118,7 @@ public function getLdapConfig(?AccessUrl $url = null): array
             'data_correspondence' => $this->getLdapDataCorrespondenceConfig(
                 $ldapConfig['data_correspondence'] ?? []
             ),
+            'object_class' => $ldapConfig['object_class'] ?? 'inetOrgPerson',
         ];
     }
 

src/CoreBundle/Helpers/LdapAuthenticatorHelper.php

@@ -44,7 +44,7 @@ private function queryAllUsers(): array
         $keywordType = trim($request->query->get('keyword_type', ''));
 
         $ldapQuery = [
-            '(objectClass=inetOrgPerson)',
+            "(objectClass={$this->ldapConfig['object_class']})",
         ];
 
         if ($keywordUsername) {
@@ -84,7 +84,10 @@ private function queryByOu(string $ou): array
         }
 
         return $this->ldap
-            ->query("ou=$ou,".$this->ldapConfig['base_dn'], '(objectClass=inetOrgPerson)')
+            ->query(
+                "ou=$ou,".$this->ldapConfig['base_dn'],
+                "(objectClass={$this->ldapConfig['object_class']})"
+            )
             ->execute()
             ->toArray()
         ;