I tried my very best to use the function "Authorize by group membership" but I couldn't get it work.
I see via the test tool, that the user is authenticated, but he is denied because of the grouprights:
[NOTICE] adLDAP object created.
[INFO] max_login_attempts: 3
[INFO] users failed logins: 0
[NOTICE] Authentication successfull
[NOTICE] cleaning up failed logins for user "xxxx"
[WARN] Authorization by group failed. User is not authorized.
How do I set the groupname? I tried different options but none was working.
Is it possible for you to extend the test tool, so that it shows the LDAP string which is given to the database?
Then it would be easier to troubleshoot.