I believe findUser should include self._user_objclasses in the filter string it builds - at least in cases where no search value is specified.
At the moment, if you try and set the "user base" to be the base DN of the site (ie, remove the "OU=People" prefix), then search for users, you will get every record in the AD used rather than being restricted to objectClass=people.
Happy to help with a patch to this, but not sure what semantics are desired.
|
