Skip to content
Snippets Groups Projects
Commit b732f8c5 authored by Vladimir Homutov's avatar Vladimir Homutov
Browse files

Fixed LDAP name of the "sAMAccountName" attribute.

The correct name starts with the lowercase 's'.

https://msdn.microsoft.com/en-us/library/ms679635
parent d234e674
No related branches found
No related tags found
No related merge requests found
......@@ -103,7 +103,7 @@ For detailed instructions, see [Configuring the Reference Implementation](https:
If the authentication server runs Active Directory rather than OpenLDAP, uncomment the following directive as shown:
```
proxy_set_header X-Ldap-Template "(SAMAccountName=%(username)s)";
proxy_set_header X-Ldap-Template "(sAMAccountName=%(username)s)";
```
In addition, the **X-Ldap-Template** header can be used to create complex LDAP searches. The code in ldap-auth-daemon creates a search filter that is based on this template header. By default, template is empty, and does not make any effect on LDAP search. However, you may decide for instance to authenticate only users from a specific user group (see LDAP documentation for more information regarding filters).
......
......@@ -93,7 +93,7 @@ http {
# (Required if using Microsoft Active Directory as the LDAP server)
# Set the LDAP template by uncommenting the following directive.
#proxy_set_header X-Ldap-Template "(SAMAccountName=%(username)s)";
#proxy_set_header X-Ldap-Template "(sAMAccountName=%(username)s)";
# (Optional if using OpenLDAP as the LDAP server) Set the LDAP
# template by uncommenting the following directive and replacing
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment