LDAP (simple auth) authentication may not cover email and username at the same time

[philipphutterer]

Gitea Version

1.16.0

Description

I want to be able to login with either email or username through LDAP (simple auth), but both should be possible. The User-DN for email login is not equal to the User-DN for a username login. I am aware that there is the option to add two LDAP sources that only differ in the User-DN. That unfortunately only works in such a way, that once a user logged in with either email or username, its account is bound to that method. The system does not check other sources than the one bound (see signin.go).

In my opinion there should either be an option to add multiple User-DN entries in a single source or the system should check multiple sources even if a user is already found in the database (but only for authentication).

[philipphutterer]

basically fixed with #18800