net-kingdom/identity-provisioner
tegwick 2ebc4f0ae8 NK-WP-0054-T05: identity-provisioner logs in as a configurable LLDAP user; svc-*/-admin names reserved
LLDAP_ADMIN_USERNAME (default admin) lets the provisioner use svc-provisioner
after the bind split; preferred usernames starting svc- or ending -admin are
refused like admin.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 308701@bnt-lap001
Assistant-Session: 5548e447-444c-4dcc-bed1-05c16eebfe56
2026-10-28 20:11:04 +01:00
..
migrations feat(identity): add PostgreSQL provenance and verify sealed SOPS custody 2026-10-17 01:36:38 +02:00
tests NK-WP-0054-T05: identity-provisioner logs in as a configurable LLDAP user; svc-*/-admin names reserved 2026-10-28 20:11:04 +01:00
Containerfile feat(identity): add PostgreSQL provenance and verify sealed SOPS custody 2026-10-17 01:36:38 +02:00
copy-client-secret.py Add scoped LLDAP identity provisioner 2026-07-28 00:57:16 +02:00
group_provenance.py feat(identity): add PostgreSQL provenance and verify sealed SOPS custody 2026-10-17 01:36:38 +02:00
group_provenance_postgres.py feat(identity): add PostgreSQL provenance and verify sealed SOPS custody 2026-10-17 01:36:38 +02:00
password_setup.py NK-WP-0054-T05: identity-provisioner logs in as a configurable LLDAP user; svc-*/-admin names reserved 2026-10-28 20:11:04 +01:00
provisioner.py NK-WP-0054-T05: identity-provisioner logs in as a configurable LLDAP user; svc-*/-admin names reserved 2026-10-28 20:11:04 +01:00
requirements-postgres.txt feat(identity): add PostgreSQL provenance and verify sealed SOPS custody 2026-10-17 01:36:38 +02:00
server.py NK-WP-0054-T05: identity-provisioner logs in as a configurable LLDAP user; svc-*/-admin names reserved 2026-10-28 20:11:04 +01:00