Integration of LDAP user and groups from LDAP source

[Lusti67]

Important notices

Before you add a new report, we ask you kindly to acknowledge the following:

• I have read the contributing guide lines at https://github.com/opnsense/core/blob/master/CONTRIBUTING.md
• [X ] I am convinced that my issue is new after having checked both open and closed issues at https://github.com/opnsense/core/issues?q=is%3Aissue

Is your feature request related to a problem? Please describe.
Yes the feature request is relatet to a problem, that I would like to import different LDAP Groups in OPNSense. The Firewall should also be able to import the members of this group. The group should be imported from the LDAP source and if not present on OPNSense the group and the included members be created

A clear and concise description of what the problem is including your motivation for the request,
i.e. "For the purpose of [...] I am missing a solution that will [...]."
I want to set different privileges to imported groups at the OPNsense firewall
This option could also be very nice if OPNsense would implement a userportal where users can login and download the VPN client and configuration itself.

Describe the solution you like

A clear and concise description of what you want to happen.
(e.g. I would like an input field in the /ui/firewall/alias which would add .... to ....)
As example it should be possible to set multiple Base DN to search users and groups
(printscreens are an example from another product)

A scheduler that imports the users and groups on OPNsense filrewall

Describe alternatives you considered

A clear and concise description of any alternative solutions or features you considered.

Additional context

Add any other context or screenshots about the feature request here or links to relevant forum thread or similar

[AdSchellevis]

Group relations can already be synced on login (https://docs.opnsense.org/manual/how-tos/user-ldap.html#step-1-1-optional-synchronize-groups), when the user doesn't exist yet, there's also the possibility to auto-create on login.

[Lusti67]

Hi AdSchellevis

memberOf is not a LDAP standard. This is an attribute used from Active Directory
So this query will not work if you have an openLDAP oder eDirectory. The use Standard LDAP attributes named member

[AdSchellevis]

In most cases you can add the attribute, I believe it originates from Microsoft indeed, but is quite common as part of RFC2307bis support (just google RFC2307bis and memberOf). I'm open to support other attribute names, depending on what they look like, easy to test using our authentication tester.