[TC-331] LDAP search filter contains Active Directory specific attributes

• Type: Improvement
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Component/s: Traffic Ops
• Labels: active_directory ldap
• Assignee: Unassigned
• Reporter: Jeff Elsloo
• Created: 15/May/17 19:51
• Updated: 13/Jun/17 20:26

Description

Moved from https://github.com/Comcast/traffic_control/issues/1129

The search filter used to locate user DNs contains hard coded values that only work with Active Directory:

$mesg = $ldap->search( base => $search_base, filter => "(&(objectCategory=person)(objectClass=user)(sAMAccountName=$username))" );

This search filter should be configurable and should be in ldap.conf. Instead, it's hard coded in TrafficOps.pm.

For example, this search filter would work with most non-AD based LDAP severs:

(&(objectClass=inetOrgPerson)(uid=$username))