Section 3.47.1. Using <AuthBy LDAP2> with Microsoft Active Directory
Section 3.47.2. BaseDN(684 / 1693)
Section 3.47.3. SearchFilter
3.47.2. BaseDN
This is the base DN, where searches are made. It is used in
similar way as with all LDAP modules. For more information, see Section 3.9.1. BaseDN.
Special formatting
characters are permitted. When using <AuthBy
LDAP2>, %0 is replaced by
UsernameAttr and %1 by the user
name.
Tip
On some LDAP servers, you can get a significant
performance increase by narrowing the search to the exact entry you are
interested in. With AuthBy LDAP2 default settings, this example restricts
the search to uid=username,ou=foo,o=bar,c=au: