Summary

Usage

 
LDAPSearchFilters[]=<filter> 

Description

This setting allows you to add an extra search requirement, it allows you to limit the set of data to search through. It is recommended to uncomment it if you don't need it.
This setting permits you to search for a particular class using for example 'objectClass--inetOrgPerson', or a particular attribute using 'myattribute--myvalue'. Keep in mind that ini files do not allow for "=", a replacement for the equal sign must be set in the setting LDAPEqualSign in the block [LDAPSettings]. By default "--" is used.
It is possible to configure multiple filters, which will be combined and used together.
The filter for the user who is logging in (for example 'uid--johndoe') will automatically be added by the login handler.

This setting is case sensitive.

Examples

LDAPSearchFilters[]=objectClass--inetOrgPerson

The LDAP search will be done in this particular class.