External Group not only as CN but also as all users part of an OU, and / or by specific value of Attribute.
Description
Our LDAP does not have a Group CN with the as external flagged Users. Instead we have either an OU where all external Users live. Or also an Attribute accountType which states "External" for these Users.
Proposal
- Allow an optional filter function to identify the external Users. (e.g. accountType=External)
- Provide the possibility of a external_users_base, which specifies the OU which users are marked as external.
If someone dives on this, consider the same options for admin_group