https://bugs.openldap.org/show_bug.cgi?id=9438
--- Comment #2 from Michael Ströder michael@stroeder.com --- Feature request for a new config parameter 'remoteauth_filter' used to specify when to forward the bind request.
Example and default:
remoteauth_filter "(!(userPassword=*))"
With such a parameter I could replace OATH-LDAP's bind_proxy with slapo-remoteauth by defining this filter:
remoteauth_filter "(&(objectClass=aeUser)(!(oathToken=*)))"