Allow specifying full group DN instead of just group name #1078

Closed
opened 2026-02-04 23:41:35 +03:00 by OVERLORD · 1 comment
Owner

Originally created by @craftbyte on GitHub (Mar 9, 2019).

Describe the feature you'd like
Allows specifying the full DN of a role auto assign group instead of just the name.

Describe the benefits this feature would bring to BookStack users
In large federated AD environment (like the one we have at the University of Ljubljana) each part of the company has their own AD server with a specific domain (subdomain). We would be able to limit a role like wikiadmin to only one in our AD domain and not the whole federation, if someone else were to make a group with a same name.

Additional context
DNs are in same format as usernames:
CN=WikiAdmins,OU=Groups,DC=member1,DC=example,DC=com

Originally created by @craftbyte on GitHub (Mar 9, 2019). **Describe the feature you'd like** Allows specifying the full DN of a role auto assign group instead of just the name. **Describe the benefits this feature would bring to BookStack users** In large federated AD environment (like the one we have at the University of Ljubljana) each part of the company has their own AD server with a specific domain (subdomain). We would be able to limit a role like wikiadmin to only one in our AD domain and not the whole federation, if someone else were to make a group with a same name. **Additional context** DNs are in same format as usernames: `CN=WikiAdmins,OU=Groups,DC=member1,DC=example,DC=com`
OVERLORD added the 🔨 Feature Request🚪 Authentication🏭 Back-End labels 2026-02-04 23:41:35 +03:00
Author
Owner

@ssddanbrown commented on GitHub (Nov 8, 2022):

Thank for the request here but I'm going to close this off since it's had relatively little demand since the original request and I don't want to expand the scope of the authentication systems without clear & wide benefit.

@ssddanbrown commented on GitHub (Nov 8, 2022): Thank for the request here but I'm going to close this off since it's had relatively little demand since the original request and I don't want to expand the scope of the authentication systems without clear & wide benefit.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/BookStack#1078