added LDAP config to set filter for finding user attributes (#877)

src/DependencyInjection/Configuration.php

@@ -570,6 +570,7 @@ class Configuration implements ConfigurationInterface
                                 ->thenInvalid('The ldap.user.filter must be enclosed by a matching number of parentheses "()" and must NOT contain a "%%s" replacer')
                             ->end()
                         ->end()
+                        ->scalarNode('attributesFilter')->defaultValue('(objectClass=*)')->end()
                         ->scalarNode('usernameAttribute')->defaultValue('uid')->end()
                         ->arrayNode('attributes')
                             ->defaultValue([])

src/Ldap/LdapManager.php

@@ -106,7 +106,6 @@ class LdapManager
     public function updateUser(User $user)
     {
         $baseDn = $user->getPreferenceValue('ldap.dn');
-        $filter = '(objectClass=*)';
 
         if (null === $baseDn) {
             throw new LdapDriverException('This account is not a registered LDAP user');
@@ -119,7 +118,7 @@ class LdapManager
         }
         $user->setPreferenceValue('ldap.dn', $baseDn);
 
-        $entries = $this->driver->search($baseDn, $filter);
+        $entries = $this->driver->search($baseDn, $this->params['attributesFilter']);
 
         if ($entries['count'] > 1) {
             throw new LdapDriverException('This search must only return a single user');

tests/DependencyInjection/AppExtensionTest.php

@@ -138,6 +138,7 @@ class AppExtensionTest extends TestCase
                     'baseDn' => null,
                     'filter' => '',
                     'usernameAttribute' => 'uid',
+                    'attributesFilter' => '(objectClass=*)',
                     'attributes' => [],
                 ],
                 'role' => [

tests/DependencyInjection/ConfigurationTest.php

@@ -198,6 +198,7 @@ class ConfigurationTest extends TestCase
                 'baseDn' => '',
                 'filter' => '',
                 'usernameAttribute' => 'uid',
+                'attributesFilter' => '(objectClass=*)',
                 'attributes' => [],
             ],
             'role' => [

tests/Ldap/LdapManagerTest.php

@@ -43,6 +43,7 @@ class LdapManagerTest extends TestCase
                 'attributes' => [],
                 'filter' => '(&(objectClass=inetOrgPerson))',
                 'usernameAttribute' => 'uid',
+                'attributesFilter' => '(objectClass=*)',
                 'baseDn' => 'ou=users, dc=kimai, dc=org',
             ],
             'role' => $roleConfig,