How to implement LDAP which shows certain attributes only for the respective authenticated user?

[aretaon]

I'm trying to set up Dex against an LDAP server which works as follows:

• You can use anonymous binds to retrieve the usernames (and some group attributes)
• Once a user authenticates against the server, additional attributes such as email and full name are exposed

When using Dex with anonymous auth, I currently cannot extract email address and full name because anonymous auth has no permission. There was a discussion in #1361 about implementing such a feature but it was dropped. An I missing something or is my situation not covered by Dex as it currently is?

Thanks in advance!