kvspb/nginx-auth-ldap — pull request #24 by rdnelson (2013-10-18 19:14:05+00:00)
Title: Fixed #21 by rebinding to server's binddn after each bind.

The approach that I took to fixing this issue was to add a rebinding phase after each check_user bind. During the rebind phase, the connection is rebound to the server's original DN. This prevents subsequent user lookups from being executed under user's credentials, meaning that users do not need search permissions, and invalid binds no longer cause lookups to fail.