auth_ldap

[Michael]

On Wed, Aug 20, 2008 at 17:57:45, Igor Sysoev said...

> > You should also consider adding a filter, like apache does this, eg:
> > 
> > Require ldap-filter |(employeeType=Staff)(employeeType=Freelance)
> 
> I do not know LDAP syntax, but in nginx style it's better to use variables:
> 
> auth_ldap_query
>    "ou=People,dc=chaos,dc=jmt,uid=$remote_user,...|(employeeType=Staff)...";

Oh certainly, I was just pasting in what Apache uses, since it already does
this.  I agree, doing the query like you used would be better.

-- 
Michael Stella  |  IT Systems Architect
PGP: 1024D/BC3FF6D4 2BC2 A79B 88D1 218A B32B  ED7A 2EC2 1206 BC3F F6D4
"To dwell on the destination is to waste the journey"