Hi, If your ldap implement extensible matching (ms ad not support 
https://msdn.microsoft.com/en-us/library/cc223241.aspx),
I think you can use (not tested):

cas.authn.Ldap[0].userFilter=(&(cn={user})(|(ou:dn:=users)(ou:dn:=people)))

-- 
- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/55a372bd-5a73-417c-bf98-c0c42275ad50%40apereo.org.

Reply via email to