Skip to content

Commit 2434564

Browse files
committed
SEC-1904: Fixed LDAP object class name in docs.
1 parent 538e75c commit 2434564

File tree

1 file changed

+8
-4
lines changed

1 file changed

+8
-4
lines changed

docs/manual/src/docbook/ldap-auth-provider.xml

Lines changed: 8 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -127,10 +127,14 @@
127127
<para> <literal>group-search-filter</literal>. The filter which is used to
128128
search for group membership. The default is
129129
<literal>uniqueMember={0}</literal>, corresponding to the
130-
<literal>groupOfUniqueMembers</literal> LDAP class. In this case, the
131-
substituted parameter is the full distinguished name of the user. The
132-
parameter <literal>{1}</literal> can be used if you want to filter on the
133-
login name.</para>
130+
<literal>groupOfUniqueNames</literal> LDAP class <footnote><para>
131+
Note that this is different from the default configuration of the
132+
underlying <classname>DefaultLdapAuthoritiesPopulator</classname>
133+
which uses <literal>member={0}</literal>.
134+
</para></footnote>.
135+
In this case, the substituted parameter is the full distinguished name
136+
of the user. The parameter <literal>{1}</literal> can be used if you
137+
want to filter on the login name.</para>
134138
</listitem>
135139
</itemizedlist> So if we used the following configuration <programlisting language="xml"><![CDATA[
136140
<ldap-authentication-provider user-dn-pattern="uid={0},ou=people"

0 commit comments

Comments
 (0)