ldap user default role configuration

etc/webapi.conf

@@ -90,6 +90,8 @@ AuthFilter = "(&(uid=%s))"
 CoverAttributes = true
 TLS = false
 StartTLS = true
+# ldap user default roles
+DefaultRoles = ["Standard"]
 
 [LDAP.Attributes]
 Nickname = "cn"

src/models/user.go

@@ -259,10 +259,14 @@ func LdapLogin(username, pass string) (*User, error) {
 
 	now := time.Now().Unix()
 
+	if len(config.C.LDAP.DefaultRoles) == 0 {
+		config.C.LDAP.DefaultRoles = []string{"Standard"}
+	}
+
 	user.Password = "******"
 	user.Portrait = ""
-	user.Roles = "Standard"
-	user.RolesLst = []string{"Standard"}
+	user.Roles = strings.Join(config.C.LDAP.DefaultRoles, " ")
+	user.RolesLst = config.C.LDAP.DefaultRoles
 	user.Contacts = []byte("{}")
 	user.CreateAt = now
 	user.UpdateAt = now

src/pkg/ldapx/ldapx.go

@@ -19,6 +19,7 @@ type LdapSection struct {
 	CoverAttributes bool
 	TLS             bool
 	StartTLS        bool
+	DefaultRoles    []string
 }
 
 type LdapAttributes struct {