Support System.DirectoryServices.Protocols on Linux/Mac

[karelz]

Port System.DirectoryServices.Protocols to Linux & Mac -- we need to decide on x-plat LDAP library to use first

Note: Offshoot from larger topic #14734

[karelz]

Currently we do not have immediate plans to implement the library on Linux/Mac. You can use top post upvoting to add your vote.

The issue is marked as up-for-grabs for anyone who knows the space and wants to pick it up.

[carlowahlstedt]

While I don’t know the space, I’d love to work on the Mac portion. If an x-plat library is decided then at some point after that’s I can start hacking on it.

[pasikarkkainen]

It's a bit surprising that .NET Core doesn't have an integrated/official LDAP library available out of the box.. shouldn't there be one? It could be then used for System.DirectoryServices.Protocols aswell.

[euclid47]

@pasikarkkainen the closest thing to support is Novell.directory.ldap.netstandard on github. It took a while to get it working. It is adequate for basic use but it is not as comprehensive as the classic dot net implementation. The hardest part is working with userAccountControlattribute and creating objects. I had to create UAC enum flags which was something I had not done before. Be careful about creating users, groups, OUs and the like because you have to explicitly create all required attributes which is a game of trial and error. I have this working against Active Directory but have not tried it against OpenLdap or the like.

[euclid47]

@karelz Any movement on the issue?

[karelz]

@euclid47 no update. If/when we decide to invest, we will update this issue.

[j3vans]

While the work Microsoft and community have done with asp.net core is amazing, it is disappointing that it is being sold as cross platform and mature at 2.0 yet lacks a robust cross platform ldap library. All the other languages/frameworks we use have this, and ldap servers are still ubiquitous in heterogeneous enterprise networks (in my humble experience). This is the one thing preventing us from adopting asp.net core as our go to cross platform framework, since we need to be able to deploy on Linux web servers. Hope that this becomes a priority soon because we'd love to work with asp.net core more.

[jchannon]

In terms of LDAP we are using this successfully on Linux. (https://github.com/VQComms/CsharpLDAP/tree/coreclrPort) This is used for searching and authenticating LDAP users. It's not on nuget but on an internal nuget repo but if people want to help out on the project we could look to move it to Nuget for public consumption. We have been using this for over a year.

[carlowahlstedt]

@karelz sounds like what @jchannon has is a solid beginning to solve this issue. Is there an outline of what it would take to get this going? You mentioned deciding on an x-plat library, could the decision be to use this port? If not, what’s missing from there to make it “official” enough to use?

[karelz]

@carlowahlstedt taking in existing project means we have to involve lawyers, check license, etc.

The decision about x-plat library needs someone to recommend a solution - ideally with some comparison of alternative options, how popular the library is, etc. And ideally with a prototype / proof of concept. It can be done as well by community members. Internally we do not have deep knowledge of LDAP libraries on Linux/Mac.

[jchannon]

Our lib takes the old Novell LDAP code so its pretty solid

[pasikarkkainen]

The other option as LDAP library is: https://github.com/dsbenghe/Novell.Directory.Ldap.NETStandard
Are there other options out there?

But really .NET Core should have an official LDAP library built-in, which is opensource, and thus could be used on all the supported platforms.

[jchannon]

That uses the same Novell code underneath too

…

On 22 November 2017 at 17:12, pasikarkkainen ***@***.***> wrote: The other option as LDAP library is: https://github.com/dsbenghe/ Novell.Directory.Ldap.NETStandard Are there other options out there? But really .NET Core should have an official LDAP library built-in, which is opensource, and thus could be used on all the supported platforms. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <https://github.com/dotnet/corefx/issues/24843#issuecomment-346415702>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AAGapi_B07pT0K4fP80-serYKlTtj3Ksks5s5FYSgaJpZM4QE9rj> .

[karelz]

@jchannon I am not familiar with Novell LDAP.
Is that the only option out there? Is that the best option? Why? What about perf? (you commented on reliability)
What about availability on various Linux distros and on Mac?
Is it actively maintained?

Those are the questions I would go after if I was trying to give a recommendation.