made search_dn & group_dn optional. Added group_query

2018-05-10 05:12:42 -06:00
parent 3b66acc72a
commit d1ae2e7012
4 changed files with 100 additions and 50 deletions
--- a/login-ldap.yaml
+++ b/login-ldap.yaml
@@ -5,9 +5,10 @@ version: 3
 ssl: false
 start_tls: false
 opt_referrals: false
-user_dn: uid=[username],dc=company,dc=com
-search_dn: ou=users,dc=company,dc=com
-group_dn: ou=groups,dc=company,dc=com
+user_dn: 'uid=[username],dc=company,dc=com'
+search_dn:
+group_dn:
+group_query: '(&(cn=*)(memberUid=[username]))'
 map_username: uid
 map_fullname: givenName lastName
 map_email: mail