diff --git a/src/authm_mad/remotes/ldap/ldap_auth.rb b/src/authm_mad/remotes/ldap/ldap_auth.rb index 31b2be7edd..7722ef6b1b 100644 --- a/src/authm_mad/remotes/ldap/ldap_auth.rb +++ b/src/authm_mad/remotes/ldap/ldap_auth.rb @@ -168,7 +168,7 @@ class OpenNebula::LdapAuth result=@ldap.search( :base => group, :attributes => [@options[:group_field]], - :filter => "(#{@options[:group_field]}=#{username})") + :filter => "(#{@options[:group_field]}:=#{username})") if result && result.first true @@ -202,7 +202,7 @@ class OpenNebula::LdapAuth ldap_groups = [@user['memberOf']].flatten else group_base = @options[:group_base] ? @options[:group_base] : @options[:base] - filter = Net::LDAP::Filter.equals(@options[:group_field], @user[@options[:user_group_field]].first) + filter = Net::LDAP::Filter.ex(@options[:group_field], @user[@options[:user_group_field]].first) ldap_groups = @ldap.search( :base => group_base, :attributes => [ "dn" ],