> Can the LDAP filter in BindLdapAuthenticationHandler take the format
>                                <property name="filter" 
> value="(&(cn=%u)(userStatus=A))"

Yes.  Any valid LDAP search query will work.

> It is my understanding that this handler first search LAP and then binds to 
> LDAP as the user.

That is correct, it searches for a single user matching the search
query and then attempts a bind operation using the returned DN and
password.  I should note that it's considered an error condition (by
default) for the search query to return multiple results, although the
handler can be configured to allow this.

M

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-dev

Reply via email to