Integrate LDAP support

[powerdns]

Integrate LDAP support

[neilcook]

This is an interesting potential feature. I think that caching is key here, because there's no particular reason to suppose that C++ LDAP lookups will be much faster than Lua LDAP lookups. Both delay the Lua call enormously. What might be better is a pre-call to LDAP before Lua is called, and the results passed to Lua.

[neilcook]

BTW @sshipway are you aware of the ability to lookup arbitrary LDAP data from Dovecot and pass that information to weakforce? That may give you what you want, without the need to do LDAP lookups in weakforced.

See the example of "attrs/cos=%{userdb:cos}" in https://wiki.dovecot.org/Authentication/Policy

[sshipway]

Yes, I know about doing ldap retrievals per-user in Dovecot; however weakforced is wider than dovecot, and we also call it from AppSuite, Momentum and potentially other applications in the future; plus the use case I'm thinking about is where you might have per-domain limit options, which would be a separate LDAP lookup to the userdb. We have multiple customers who may wish to set per-domain thresholds over all of their mailbox domain at once.

As you said, the caching is the key (though having a native function would make the coding easier), including negative caching, to speed things up. Being able to set a positive and negative lookup cache time, plus cache size (and to extract stats on cache occupancy and hit rate for tuning) would be good.