#702 - Allow Active Directory SAM binding

Identifier #702
Issue type Minor issue (breaks specific functionality)
Title Allow Active Directory SAM binding
Status Completed
Handling member Chris Graham
Version 8.1.2
Addon General / Uncategorised
Description Active Directory does not use CN's (and thus DN's) to represent login usernames. Those are used for full names, although Active Directory does force uniqueness on them (very silly design...).

Add support for the 'Login property' being set to 'sAMAccountName', which will activate sam-based login (Windows-specific), rather than DN-based login. Remove the hidden-option added yesterday for sam logins which did not work right.

Ensure that LDAP queries never use DN's to find users, always must do a search filter instead.

Generally tidy up and comment code also, especially the quirks the code is trying to solve.
Steps to reproduce

Funded? No
Commits

4ae475d

The system will post a comment when this issue is modified (e.g., status changes). To be notified of this, click "Enable comment notifications".

Rating

Unrated