Support multiple LDAP backends about mosquitto-auth-plug

[jpmens]

I'm assuming you're speaking AD language? In any case, please elaborate with examples so that I can understand what you're after...

[carroarmato0]

Sorry, brainfart on my end. The reason why I posted this issue was to be able to pass multiple DN's in order to allow people from different domains to authenticate to ldap.

I kinda solved it for myself by trimming down the ldap_uri, but that means allowing all other domains which in certain situations is not really desirable.

What I was thinking about is something along the lines of:

auth_opt_backends ldap

auth_opt_binddn_0 uid=admin,ou=people,dc=zimbra,dc=mydomain,dc=com
auth_opt_ldap_uri_0 ldap://192.168.0.99:389/dc=mydomain,dc=com?uid?sub?(&(objectClass=ZimbraAccount)(uid=@))

auth_opt_binddn_1 uid=admin,ou=people,dc=zimbra,dc=mydomain,dc=com
auth_opt_ldap_uri_1 ldap://192.168.0.99:389/dc=profit,dc=com?uid?sub?(&(objectClass=ZimbraAccount)(uid=@))

So should Bob from profit.com try to authenticate, the authentication module would go through the different ldap entries until I matches. Or perhaps use the correct one based on domain name in the username section.

[jpmens]

In short: #wontfix. Reason: this can easily be accomplished by adding, say, &(mqtt=yes) to the configured URI to find only those LDAP objects with the specified attribute type.