Re: [GENERAL] Filters not supported for LDAP authentication

2016-09-03 Thread Magnus Hagander
On Wed, Aug 31, 2016 at 2:43 PM, Bastien Bodart wrote: > Hi, > > Is there any reason filters are not supported for search+bind LDAP > authentication? > There is no option to pass a filter in search+bind mode and > "ldapsearchattribute" parameter is even checked to prevent filter injection. > "lda

[GENERAL] Filters not supported for LDAP authentication

2016-09-02 Thread Bastien Bodart
Hi, Is there any reason filters are not supported for search+bind LDAP authentication? There is no option to pass a filter in search+bind mode and "ldapsearchattribute" parameter is even checked to prevent filter injection. "ldapurl" parameter is defined as an RFC 4516 LDAP URL except filters