On Thu, Jan 14, 2021 at 10:27:35PM -0000, gary.algier@mavenir.com wrote:
Hello,
I need to bind sometimes with a username that is not in DN format. I have tried to use authz-regexp to translate it but I am not successful.
OpenLDAP will try and normalise the incoming DN and an email-like string is never a valid dn, so there's no way around that.
How limited are your clients? Can they accept a DN to use? Each user in AD still has a relevant entry, so you can use their DN if you can find it.
Regards,