Commit 30c184f
authored
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?v=4&size=40){kind=avatar}
fix(deps): update module github.com/netresearch/simple-ldap-go to v1.12.0 (#231)
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/netresearch/simple-ldap-go](https://redirect.github.com/netresearch/simple-ldap-go)
| `v1.11.0` → `v1.12.0` |
|
|
---
### Release Notes
<details>
<summary>netresearch/simple-ldap-go
(github.com/netresearch/simple-ldap-go)</summary>
###
[`v1.12.0`](https://redirect.github.com/netresearch/simple-ldap-go/blob/HEAD/CHANGELOG.md#v1120---2026-04-22)
[Compare
Source](https://redirect.github.com/netresearch/simple-ldap-go/compare/v1.11.0...v1.12.0)
##### Added
- **`(*LDAP).DisableUser(dn)` / `EnableUser(dn)` and their `*Context`
variants.**
Flip the `ACCOUNTDISABLE` bit (0x2) on AD `userAccountControl`,
preserving every other flag via a read-modify-write. Idempotent — a
second disable on an already-disabled account is a no-op, not an error.
- **`(*LDAP).DisableComputer(dn)` / `EnableComputer(dn)` and their
`*Context` variants.** Same mechanism as user, same idempotency.
Preserves `WORKSTATION_TRUST_ACCOUNT` and any other UAC flags on the
entry.
- **`ACCOUNTDISABLE` exported constant** (`uint32 = 0x2`) for callers
who want to compose their own UAC writes.
- **`User.AdminCount bool`** — mapped from the `adminCount` AD
attribute; `true` when AD has flagged the user as privileged via
`adminSDHolder` (members of Domain Admins / Enterprise Admins /
Administrators / Account Operators / Backup Operators, etc.). `false` on
OpenLDAP entries which never set this attribute. The field is sticky: AD
does not clear it when a user leaves a protected group, so
`AdminCount=true` means "is OR was privileged", not a perfect real-time
check. Documented inline on the struct field.
- `adminCount` added to the internal `userFields` attribute list fetched
by every user search.
##### Notes
- Disable/Enable require Active Directory. OpenLDAP `inetOrgPerson` has
no portable disable attribute; calls return a clear error
("userAccountControl attribute missing on … (not an Active Directory
entry?)") instead of a silent no-op.
- Disable/Enable are NOT atomic across concurrent callers — the
read-modify-write window is visible to parallel UAC writes on the same
DN. The ACCOUNTDISABLE-bit case converges to whichever write commits
last; callers needing strict ordering should serialise their admin
operations.
***
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/netresearch/raybeam).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNDEuMyIsInVwZGF0ZWRJblZlciI6IjQzLjE0MS4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->2 files changed
Lines changed: 3 additions & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
5 | 5 | | |
6 | 6 | | |
7 | 7 | | |
8 | | - | |
| 8 | + | |
9 | 9 | | |
10 | 10 | | |
11 | 11 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
115 | 115 | | |
116 | 116 | | |
117 | 117 | | |
| 118 | + | |
| 119 | + | |
118 | 120 | | |
119 | 121 | | |
120 | 122 | | |
| |||
0 commit comments