From 07c168220b8584c450d1d0b3034896c89a5c0de0 Mon Sep 17 00:00:00 2001
From: Ruben Hensen <ruben.hensen@protonmail.com>
Date: Sun, 5 Apr 2026 22:48:35 +0200
Subject: [PATCH] Revert property mapping

---
 authentik/blueprint-ldap.yaml       | 11 -----------
 nix-infra-machine/nodes/node001.nix |  6 +++---
 2 files changed, 3 insertions(+), 14 deletions(-)

diff --git a/authentik/blueprint-ldap.yaml b/authentik/blueprint-ldap.yaml
index a05ea15..50930e1 100644
--- a/authentik/blueprint-ldap.yaml
+++ b/authentik/blueprint-ldap.yaml
@@ -8,15 +8,6 @@ data:
     metadata:
       name: LDAP Provider
     entries:
-      - model: authentik_providers_ldap.ldapprovidermapping
-        id: ldap-mail-aliases-mapping
-        state: present
-        identifiers:
-          name: "Mail Aliases"
-        attrs:
-          name: "Mail Aliases"
-          expression: |
-            return {"mailAlternativeAddress": list(request.user.attributes.get("mailAliases", []))}
       - model: authentik_providers_ldap.ldapprovider
         id: ldap-provider
         state: present
@@ -30,8 +21,6 @@ data:
           bind_mode: cached
           search_mode: cached
           mfa_support: false
-          extra_property_mappings:
-            - !KeyOf ldap-mail-aliases-mapping
       - model: authentik_core.application
         id: ldap-app
         state: present
diff --git a/nix-infra-machine/nodes/node001.nix b/nix-infra-machine/nodes/node001.nix
index 34a05a1..ca5e7eb 100644
--- a/nix-infra-machine/nodes/node001.nix
+++ b/nix-infra-machine/nodes/node001.nix
@@ -165,15 +165,15 @@
         bind.auth.method = "lookup";
 
         filter = {
-          name = "(&(objectClass=user)(|(cn=?)(mail=?)(mailAlternativeAddress=?)))";
-          email = "(&(objectClass=user)(|(mail=?)(mailAlternativeAddress=?)))";
+          name = "(&(objectClass=user)(|(cn=?)(mail=?)(mailAliases=?)))";
+          email = "(&(objectClass=user)(|(mail=?)(mailAliases=?)))";
         };
 
         attributes = {
           name = "cn";
           class = "objectClass";
           email = "mail";
-          email-alias = "mailAlternativeAddress";
+          email-alias = "mailAliases";
           groups = "memberOf";
         };
       };