bsdperimeter/pfsense — pull request #28 by keylevel (2011-12-17 21:41:40+00:00)
Title: Add support for posix groups to LDAP auth

The changes to:

/etc/inc/auth.inc
/usr/local/www/system_authservers.php
/usr/local/www/system_usermanager_settings_ldapacpicker.php

allow an ldap container to be used to provide user group membership information.

For example, ou=Groups,dc=localdomain can be used as a container for a set of posixGroup items that define groups and group membership (via the memberUid attribute, for example).

These changes are compatible with 2.0-RELEASE and have been tested against OpenLDAP running under CentOS 6.0. The original group membership method is still supported, but I do not have a suitable system to test this. Also known to work with OpenVPN under pfSense.