Graylog2/graylog2-web-interface — pull request #104 by ssevertson (2012-12-06 19:56:27+00:00)
Title: LDAP enhancements to support non-Active Directory servers

The current LDAP authentication code makes certain assumptions that only apply to Active Directory servers (such as authenticating with the bare username instead of a fully qualified DN).

Two LDAP authentication modes are supported:
* Apply a pattern to determine the user's DN
* Perform a subtree search for the user, then binding with the found DN/password

The subtree search mode supports initially binding with a DN/password before performing the search.

All modes optionally support TLS encryption.

The ldap.yml.example file now includes comments describing the configuration options, and provides examples for all new configuration properties.