user_basedn => "ou=people,dc=yourcompany,dc=com",
user_field => "uid",
user_filter => "(&(objectClass=posixAccount)(uid=%s))",
- user_scope => "one",
+ user_scope => "one", # or "sub" for Active Directory
user_search_options => { deref => "always" },
user_results_filter => sub { return shift->pop_entry },
},
user_basedn: ou=Domain Users,ou=Accounts,dc=mycompany,dc=com
user_field: samaccountname
user_filter: (sAMAccountName=%s)
+ user_scope: sub
He also notes: "I found the case in the value of user_field to be
significant: it didn't seem to work when I had the mixed case value
}
return undef; # i.e., no match
}
-
+
use_roles
Whether or not to enable role lookups. It defaults to true; set it to 0
if you want to always avoid role lookups.