pfsense/pfsense — pull request #504 by awm (2013-04-02 19:03:30+00:00)
Title: Set LDAP option to dereference aliases when searching

Adding this setting allows users to set up aliases in their LDAP directory, and then have them dereferenced properly by pfSense.

For example, I have a bunch of people under `ou=people,dc=example,dc=com`. I then created a second ou `ou=vpnusers,dc=example,dc=com` and created aliases similar to the following under it:
```
dn: uid=user.name,ou=vpnusers,dc=example,dc=com
objectClass: alias
objectClass: extensibleObject
objectClass: top
aliasedObjectName: uid=user.name,ou=people,dc=example,dc=com
uid: user.name
```

In the pfSense User Manager I can then create an LDAP server entry that has an authentication container of `ou=vpnusers,dc=example,dc=com` with user naming attribute `uid`, giving me an LDAP connection that only authenticates a subset of the possible users.

This provides an alternative way of restricting the access of subsets of users and allows things like setting up an OpenVPN server to which only some users have access.

I have tested this on a pfSense 2.0.2 release install using both the authentication diagnostics page and an OpenVPN server configured for user authentication only (no client certificates).