froiloc

This is already part of the code. Everbody who can authenticate correctly is a user. And if this user also is member of the group specified in the attribute "groupSearchBase",...

Hi @kadogo, couldn't you use the attribute "accountPattern"? like "(?(sAMAccountname={{username}})(objectClass=*)(memberOf='CN=etherpad-users,OU=groups,DN=domain,DN=com'))" something like that should work. Just a quick idea. Haven't tested it.

Hi sorry for the late reply. Me weekend was busy and I had no computer with me. If I get you correct then for each roleOccupant you have one entry....

I'm afraid I cannot help here. My knowledge about roles in LDAP are to limited.