ldap: Improve unique_account_id defaults and docs.

Some installations will change `dn` when a user marries, and also for
Active Directory and various other LDAP providers I've checked,
there's often a better value to use.
This commit is contained in:
Tim Abbott
2025-07-18 14:32:51 -07:00
parent eaf4970215
commit 3bd82927dc
3 changed files with 9 additions and 5 deletions

View File

@@ -244,7 +244,7 @@ AUTH_LDAP_USER_ATTR_MAP = {
## A stable unique identifier for a user allows Zulip to
## automatically handle email address changes.
## See https://zulip.readthedocs.io/en/latest/production/authentication-methods.html#identifying-user-accounts-via-a-unique-ldap-attribute
"unique_account_id": "dn",
# "unique_account_id": "objectSid",
##
## Profile pictures can be pulled from the LDAP "thumbnailPhoto"/"jpegPhoto" field.
# "avatar": "thumbnailPhoto",