Refinements for LDAP support

[ap0int3d]

Hi,
Thanks a lot for adding the LDAP/LDAPS support. It works flawlessly.

Here are my first thoughts on the current implementation :

1. When LDAP is enabled, user experience at login should be simpler. Here is what I have in mind :

The "Authentication Source" drop-down menu provides a list of all available authentication methods (e.g: local and LDAP). For LDAP, you can use the LDAP_PROVIDER_ID value configured in the docker-compose-ldap file to display in the drop down menu.
If LDAP is enabled, the LDAP authentication source should be selected by default in the drop-down menu.
The Authentication Source drop-down menu should be hidden if only the local user db is used.

2. Although I understand why you chose not to implement user auto-provisioning, I think the administrator should be able to choose whether or not to enable LDAP user auto-provisioning on login. The default should remain auto-provisioning disabled.
   For a small scale environment with fewer than 5 users, manual binding makes sense but for larger environment with 30 or more "stable" users and a few temporary user accounts, manual binding becomes a pain.

[bifrost0x]

Thanks for the detailed feedback. This has now been implemented and merged via #111.

• When LDAP is enabled, the login page now shows an Authentication Source selector and selects LDAP by default. The configured LDAP_PROVIDER_ID is used as its label, while local sign-in remains available for break-glass access. The selector stays hidden for local-only installations.
• LDAP auto-provisioning is now optional through LDAP_AUTO_PROVISION and remains disabled by default.
• Provisioning happens only after a successful directory bind and includes case-insensitive identity collision protection, serialized account creation, and safeguards for the local break-glass administrator.

We also added regression coverage for login selection, provisioning, collisions, concurrency, CLI behavior, and isolation from live deployment resources.

Thanks again - this is a useful refinement for larger LDAP-backed installations.

[ap0int3d]

Perfect ! Tested and adopted ! Thanks a lot !