possible to construct a complex ldap query to filter users based on anything other than something of the type “CN=u%,OU=testou,DC=somedomain,DC=com” when using fastbindldapauthenticationhandler.
No, not possible. You're actually constructing the bind DN via string replacement, so in strict terms it's not an LDAP query filter. You have to use BindLdapAuthenticationHandler to do complex filtering. I've seen a number of interesting queries over the years; you should be able to do what you want. Let us know if you need help formulating a query. M -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user