Wiki Markup |
---|
{scrollbar} |
Anchor | ||||
---|---|---|---|---|
|
...
To use this method the roleName
and roleSearchMatching
options must be set. The LDAPLoginModule will perform an LDAP search using the roleSearchMatching
filter to search for the authenticating user's distinguished name within each group entries' roleName
attribute. To skip this method the roleName
option MUST be left unset. If the roleSearchMatching
option is left unset and the roleName
option is set then the LDAPLoginModule
will attempt to perform the search and throw an exception.
Example
Using the example configuration above and a user with the name davidwolff
logging in the following LDAP search would occur:
Find the roles using a user entry's attribute that contains the groups a user is a member of (e.g. a memberOf
attribute).
...