possible to construct a complex ldap query to filter users based on
anything other than something of the type
“CN=u%,OU=testou,DC=somedomain,DC=com” when using
fastbindldapauthenticationhandler.

No, not possible. You're actually constructing the bind DN via string
replacement, so in strict terms it's not an LDAP query filter.

You have to use BindLdapAuthenticationHandler to do complex filtering.
I've seen a number of interesting queries over the years; you should be
able to do what you want. Let us know if you need help formulating a query.

M

--
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to