Better support for multi domain AD setups

This changes how the AD auth backend handles multiple domains. It is now
possible to configure multiple authentication domains even when not
using SSO. USers can provide a domain in NTLM- and Kerberos-Style
(prepended with a backslash, appended with a @-char).

IMPORTANT: If you used AD auth before, you will need to adjust your ACLs
           and $conf['superuser'] settings.

This patch changes how user names are cleaned. Spaces and other special chars
are no longer removed. The only adjustment is lowercasing the username
and streamlining the domain handling.

User's login names will now contain the domain name in Kerberos style
(user@yourdomain.com) when they logged in a non-default domain. You need
to make sure your ACLs are setup accordingly.

Domain names are always lowercased and need to be specified lowercased
in the config.

0 files changed, 0 insertions, 0 deletions