Commit b732f8c5 authored by Vladimir Homutov's avatar Vladimir Homutov
Browse files

Fixed LDAP name of the "sAMAccountName" attribute. 

The correct name starts with the lowercase 's'.

https://msdn.microsoft.com/en-us/library/ms679635
parent d234e674

README.md

+1 −1
Original line number Diff line number Diff line
@@ -103,7 +103,7 @@ For detailed instructions, see [Configuring the Reference Implementation](https: 
If the authentication server runs Active Directory rather than OpenLDAP, uncomment the following directive as shown:



```

proxy_set_header X-Ldap-Template "(SAMAccountName=%(username)s)";

proxy_set_header X-Ldap-Template "(sAMAccountName=%(username)s)";

```



In addition, the **X-Ldap-Template** header can be used to create complex LDAP searches. The code in ldap-auth-daemon creates a search filter that is based on this template header. By default, template is empty, and does not make any effect on LDAP search. However, you may decide for instance to authenticate only users from a specific user group (see LDAP documentation for more information regarding filters).

nginx-ldap-auth.conf

+1 −1
Original line number Diff line number Diff line
@@ -93,7 +93,7 @@ http { 


            # (Required if using Microsoft Active Directory as the LDAP server)

            # Set the LDAP template by uncommenting the following directive.

            #proxy_set_header X-Ldap-Template "(SAMAccountName=%(username)s)";

            #proxy_set_header X-Ldap-Template "(sAMAccountName=%(username)s)";



            # (Optional if using OpenLDAP as the LDAP server) Set the LDAP

            # template by uncommenting the following directive and replacing