How to map a Authentik property to LDAP?

[ProjectPatatoe]

How can I map an Authentik property to LDAP?
Example:

• Authentik's first_name and on LDAP it would get givenName
• Authentik's avatar retrives through an expression and returns a base64 version of the url as jpegPhoto
• ... and so on

[nerddotdad]

@ProjectPatatoe I think we're battling some of the same monsters. So I manged to get the fields I wanted to come through from ldap but did a decent amount of trial and error using the ldapsearch tool on command line. I'm currently held up trying to get the right content for the jpeg for avatars in jellyfin but managed to get to the point where it at least reads the avatar tag from the ldap plugin and creates a jpeg file with the contents of that field. So when I cat the new profile.jpg from the user in jellyfin it has the base64 from authentik in it. Unfortuntely that isn't the content jellyfin wants apparently so I'm hoping I can get some answers from the ldap plugin authors as to what exactly they expect in that file jellyfin/jellyfin-plugin-ldapauth#154

[sskokorin]

Hi! Sorry for maybe going off topic. If I understand correctly, you were able to get a custom attribute from Authentik LDAP using ldapsearch ?
How did you do it? I struggled with this, but it didn't work.

[nerddotdad]

It's been a while since I've tinkered with it but I think what I did was use an leap browser to visualize the structure and then made a query.

[ProjectPatatoe]

I'm pretty confused as to what exactly the LDAP standard is for jpegPhoto. Is it base64? binary? url? (doubt it). only jpeg? what about png or bmp or gif?

[ProjectPatatoe]

Active Directory jpegPhoto

Used to store one or more images of a person using the JPEG File Interchange Format [JFIF].

Active Directory photo

An object encoded in G3 fax as explained in recommendation T.4, with an ASN.1 wrapper to make it compatible with an X.400 BodyPart as defined in X.420.

Not exactly LDAP but they're supposed to be compatible. Doesn't tell me if its binary or base64 but I'm assuming binary I guess?