Add support for SASL bind

[manu0401]

We introduce a ldap_sasl() method in Ldap and LdapMulti with an optionnal array of SASL options. A module that subclasses Ldap or Ldapmulti can use it instead of simple login().

This requires SASL bind support in Symfony, which has been merged in the 7.3 branch. SimpleSAMLphp uses Symfony 7.2. How should this ne handled? I can backport the patches for Symfony 7.2, but do we have a way to fold them in the simpleSAMLphp package?

[tvdijen]

Hi @manu0401 !
There is no way to fold this into SimpleSAMLphp unless we upgrade to Symfony 7.x.
We're currently running Symfony 6.4 LTS right now (not 7.2 as you said), and we will wait until the next LTS is released in Nov 2025 before we do anything.
The reason for this is that we do not have the resources to keep up with Symfony's release cycle, so we stick with the LTS-versions.

[manu0401]

I could backport to Symfony 6.4, but I understand you would need to fork it, and include the forker version? Is it something that could be done?

[tvdijen]

No, we can't maintain forks of Symfony

[manu0401]

I added tests for the new methods' presence in Symfony. That way:

• if you use login() it works as without the change
• if you use login_sasl() with older Symfony you get an exception
• if you use login_sasl() with SASL-enabled Symfony, it works

In other words, it works as it did, it is ready for Symfony upgrade, and SASL will work with SimpleSAMLphp-bundled Symfony with SASL patches.

[tvdijen]

Excellent work @manu0401 ! You think you can fix the QA-issues?
I'll merge and tag a release immediately

Update: I took care of the code quality-issues myself

[tvdijen]

Tagged v2.4.0