From de7bb13e1ecc5c34f377b39ccdc36a1f1207b4f3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Wolfgang=20Schr=C3=B6der?= <wolfgang.schroeder@proton.me>
Date: Tue, 18 Jul 2023 19:10:20 +0200
Subject: [PATCH] Support RFC2255 definition of scope for ldap authentication

Closes #12150
---
 modules/ldap_authentication/res.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/modules/ldap_authentication/res.py b/modules/ldap_authentication/res.py
index d6131d19f4..d9f4bdcd5e 100644
--- a/modules/ldap_authentication/res.py
+++ b/modules/ldap_authentication/res.py
@@ -68,7 +68,9 @@ class User(metaclass=PoolMeta):
         scope = {
             'base': ldap3.BASE,
             'onelevel': ldap3.LEVEL,
+            'one': ldap3.LEVEL,
             'subtree': ldap3.SUBTREE,
+            'sub': ldap3.SUBTREE,
             }[scope]
         uid = config.get(section, 'uid', default='uid')
         if filter_: