If you are using Active Directory, you likely have multiple LDAP servers. Which servers your Windows clients use is controlled by a DNS entry for sites and services. This DNS entry looks like _ldap._tcp.corporate._sites.yourdomain.com . This code change allows for the LDAP host name to be looked up automatically based on the DNS entry. This way if your Active Directory architecture changes (different Domain Controllers / LDAP servers ), you won't need to update this plugin's configuration. This is only enabled if you set the new LDAPAUTH_DNS_SITES_AND_SERVICES configuration value. Please see documentation in the README.md.
Added support for group auth, 2 new settings:
- LDAPAUTH_GROUP_ATTR
- LDAPAUTH_GROUP_REQ
If they're not set don't check group membership.
Added support for using a privileged account to do the user search. 2 new settings:
- LDAPAUTH_SEARCH_USER
- LDAPAUTH_SEARCH_PASS
Limited returned attributes to only the ones we need.
