Add support for FreeIPA as an LDAP vendor

Signed-off-by: Marc Rooding <marc@mrooding.me>

plugins/catalog-backend-module-ldap/src/ldap/client.ts

@@ -23,6 +23,7 @@ import { errorString } from './util';
 import {
   ActiveDirectoryVendor,
   DefaultLdapVendor,
+  FreeIpaVendor,
   LdapVendor,
 } from './vendors';
 
@@ -199,6 +200,8 @@ export class LdapClient {
       .then(root => {
         if (root && root.raw?.forestFunctionality) {
           return ActiveDirectoryVendor;
+        } else if (root && root.raw?.ipaDomainLevel) {
+          return FreeIpaVendor;
         }
         return DefaultLdapVendor;
       })

plugins/catalog-backend-module-ldap/src/ldap/vendors.ts

@@ -63,6 +63,16 @@ export const ActiveDirectoryVendor: LdapVendor = {
   },
 };
 
+export const FreeIpaVendor: LdapVendor = {
+  dnAttributeName: 'dn',
+  uuidAttributeName: 'ipaUniqueID',
+  decodeStringAttribute: (entry, name) => {
+    return decode(entry, name, value => {
+      return value.toString();
+    });
+  },
+};
+
 // Decode an attribute to a consumer
 function decode(
   entry: SearchEntry,