'''Short description'''

I tried to implement the Ldap Authentication, using a Ldap-Server with acl-controlled access. When I have a bind as "uid=randomuser,ou=people,dc=company,dc=com" I am not allowed to do a search with the base "ou=people,dc=company,dc=com", I am only allowed to use the search base "uid=randomuser,ou=people,dc=company,dc=com".

Therefore I need to set

{{{
base_dn='uid=%(username)s,ou=people,dc=company,dc=com'
}}}
to use the entered loginname as part of the base-DN, which is not supported in .auth.login.LDAPAuth.

The patch [[attachment:base_dn.patch]] uses the same technique as being used for the values "bind_dn" and "bind_pw".

Patch applied, see http://hg.moinmo.in/moin/1.9/rev/86090e014653 - thanks for the patch!

----
CategoryFeatureRequest CategoryMoinMoinPatch