group base dn

[buttle]

Hi!
We would like to manage user accounts for various wordpress installations (let's say wordpressX and wordpressY) with our LDAP. The DIT has different ou entries that contain groupOfNames for each wordpress installation.
cn=wp-managers,ou=wordpressX
cn=wp-managers,ou=wordpressY

Group-Filter is: (&(objectClass=groupOfNames)(member=%dn%))
This doesn't work because members of wp-managers,ou=wordpressX have access to the wordpressY site.

One option would be to include a 'group base dn' option in the ldapAuth config so that only groups under ou=wordpressX are filtered but I don't know if this is the best way.

How would you approach this?
Cheers!

[heiglandreas]

That might be possible once #145 is implemented.