Seth Grover

ping... project still active?

Just spitballing, perhaps the same value could be pulled from `c->conn->sockaddr` or `c->server->parsed_url->sockaddr`?

Looking at this a little bit closer, here's what I think would be really neat: Right now the code in `ngx_http_auth_ldap_ssl_handshake_handler` verifies the chain (` long chain_verified = SSL_get_verify_result(conn->ssl->connection)`) and...

I'm working on something in my fork of this plugin to handle the case of the last comment: compare [kvspb/nginx-auth-ldap/master ... mmguero-dev/nginx-auth-ldap/master](https://github.com/kvspb/nginx-auth-ldap/compare/master...mmguero-dev:master#diff-c05c0daefb48996cbf510b81002b49bc) This does't fix the bug, but it would...

I should also note, although it's obvious from looking at the code: this only fails if the call to `X509_check_host` fails, and it drops down into the `domain not in...

I'm pretty this check is wrong anyway, even if it werent' getting the segfault: ``` if (conn->sockaddr->sa_family == 4) len = 4; else if (conn->sockaddr->sa_family == 6) len = 16;...

Created PR #237 to address this bug.

FWIW I use nginx with this plugin (although I'm using [my fork](https://github.com/mmguero-dev/nginx-auth-ldap) which has some fixes in it, see kvspb/nginx-auth-ldap#237) in docker, here's [my configuration](https://github.com/mmguero/nginx-ldap).

If somebody needs this in a pinch, you could absolutely do this with stunnel, which supports this since mtrojnar/stunnel#13. I've done this before (not with glauth, but in front of...

FWIW I've got the same question, about why the FDN in the `uniqueMembers` attribute of a group misses the `users` ou. In other words, when I do a listing of...