On Thu, Feb 21, 2002 at 10:31:50AM +0000, Chris Lightfoot wrote:
... And a general question. Wouldn't it be better to allow
the administrator to specify the whole LDAP filter
strings, based on insertions like $(user) etc., in the
config file? Then your scheme would be represented by
auth-ldap-filter: (mail=$(local_part)@$(domain))
and other users could invent whatever filters they wanted?
Another technique in LDAP is to store the filters themselves in some
part of the directory. This removes the need for config file editing,
server restarts etc and provides the opportunity for dynamic directory
structures.
[We used to also put stubs of Perl code in the directory but I wouldn't
offer that out-of-the-box :-)]
Paul
what would be the use ?