[NEW] Accept variable `#{userdn}` on LDAP group filter (#16273)

5 years ago · e4aebd21df
parent ae95908a2b
commit e4aebd21df
1 changed files with 1 additions and 1 deletions
--- a/app/ldap/server/sync.js
+++ b/app/ldap/server/sync.js
@ -28,7 +28,7 @@ export function isUserInLDAPGroup(ldap, ldapUser, user, ldapGroup) {
 		return false;
 	}
 	const searchOptions = {
-		filter: syncUserRolesFilter.replace(/#{username}/g, user.username).replace(/#{groupName}/g, ldapGroup),
+		filter: syncUserRolesFilter.replace(/#{username}/g, user.username).replace(/#{groupName}/g, ldapGroup).replace(/#{userdn}/g, ldapUser.dn),
 		scope: 'sub',
 	};