diff --git a/README.md b/README.md index f5cf44e165c6ed95ce4c34fc20c4537dcc51c850..4b45ef75aede4469038d9011a95927522c2ef5b7 100644 --- a/README.md +++ b/README.md @@ -103,7 +103,7 @@ For detailed instructions, see [Configuring the Reference Implementation](https: If the authentication server runs Active Directory rather than OpenLDAP, uncomment the following directive as shown: ``` -proxy_set_header X-Ldap-Template "(SAMAccountName=%(username)s)"; +proxy_set_header X-Ldap-Template "(sAMAccountName=%(username)s)"; ``` In addition, the **X-Ldap-Template** header can be used to create complex LDAP searches. The code in ldap-auth-daemon creates a search filter that is based on this template header. By default, template is empty, and does not make any effect on LDAP search. However, you may decide for instance to authenticate only users from a specific user group (see LDAP documentation for more information regarding filters). diff --git a/nginx-ldap-auth.conf b/nginx-ldap-auth.conf index e60ef8dd644be39b24f8fa2143fc6e73036a83e1..23b20bb9b860b55b45072814d73d1687f1c2ec1b 100644 --- a/nginx-ldap-auth.conf +++ b/nginx-ldap-auth.conf @@ -93,7 +93,7 @@ http { # (Required if using Microsoft Active Directory as the LDAP server) # Set the LDAP template by uncommenting the following directive. - #proxy_set_header X-Ldap-Template "(SAMAccountName=%(username)s)"; + #proxy_set_header X-Ldap-Template "(sAMAccountName=%(username)s)"; # (Optional if using OpenLDAP as the LDAP server) Set the LDAP # template by uncommenting the following directive and replacing