While using Apache LDAP java APIs, is there a way to check for group membership
during the binding process? Or is the only way to determine group membership is
by doing a regular lookup, and only after binding? The latter approach may not
work because the authenticated user may not have the access rights to perform
any lookups, thereby forcing the use of an LDAP administrator. That means that
its credentials need to be stored somewhere outside the LDAP server in order
for the client code to use its account for the aforementioned lookup. What
approach would you suggest?
