{"action":"created","issue":{"url":"https://api.github.com/repos/Yubico/yubico-pam/issues/44","labels_url":"https://api.github.com/repos/Yubico/yubico-pam/issues/44/labels{/name}","comments_url":"https://api.github.com/repos/Yubico/yubico-pam/issues/44/comments","events_url":"https://api.github.com/repos/Yubico/yubico-pam/issues/44/events","html_url":"https://github.com/Yubico/yubico-pam/pull/44","id":47040313,"number":44,"title":"added a better ldap handling, and to allow query active directory","user":{"login":"mabels","id":19238,"avatar_url":"https://avatars.githubusercontent.com/u/19238?v=3","gravatar_id":"","url":"https://api.github.com/users/mabels","html_url":"https://github.com/mabels","followers_url":"https://api.github.com/users/mabels/followers","following_url":"https://api.github.com/users/mabels/following{/other_user}","gists_url":"https://api.github.com/users/mabels/gists{/gist_id}","starred_url":"https://api.github.com/users/mabels/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mabels/subscriptions","organizations_url":"https://api.github.com/users/mabels/orgs","repos_url":"https://api.github.com/users/mabels/repos","events_url":"https://api.github.com/users/mabels/events{/privacy}","received_events_url":"https://api.github.com/users/mabels/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":18,"created_at":"2014-10-28T15:31:00Z","updated_at":"2015-02-04T20:30:40Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/Yubico/yubico-pam/pulls/44","html_url":"https://github.com/Yubico/yubico-pam/pull/44","diff_url":"https://github.com/Yubico/yubico-pam/pull/44.diff","patch_url":"https://github.com/Yubico/yubico-pam/pull/44.patch"},"body":"I added the ldap handling so that it could work now with e.g. activedirectory.\r\n\r\nThe pam line should look like this\r\nauth  required       pam_yubico.so ldap_uri=ldap://ldap debug id=19 yubi_attr=pager ldapdn=dc=ad,dc=adviser,dc=com ldap_bind_user=cn=openvpn,cn=Users,dc=ad,dc=adviser,dc=com ldap_bind_password=dsjgjgfdgdger ldap_filter=(sAMAccountName=%u)"},"comment":{"url":"https://api.github.com/repos/Yubico/yubico-pam/issues/comments/72932683","html_url":"https://github.com/Yubico/yubico-pam/pull/44#issuecomment-72932683","issue_url":"https://api.github.com/repos/Yubico/yubico-pam/issues/44","id":72932683,"user":{"login":"ctucker1963","id":10833185,"avatar_url":"https://avatars.githubusercontent.com/u/10833185?v=3","gravatar_id":"","url":"https://api.github.com/users/ctucker1963","html_url":"https://github.com/ctucker1963","followers_url":"https://api.github.com/users/ctucker1963/followers","following_url":"https://api.github.com/users/ctucker1963/following{/other_user}","gists_url":"https://api.github.com/users/ctucker1963/gists{/gist_id}","starred_url":"https://api.github.com/users/ctucker1963/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ctucker1963/subscriptions","organizations_url":"https://api.github.com/users/ctucker1963/orgs","repos_url":"https://api.github.com/users/ctucker1963/repos","events_url":"https://api.github.com/users/ctucker1963/events{/privacy}","received_events_url":"https://api.github.com/users/ctucker1963/received_events","type":"User","site_admin":false},"created_at":"2015-02-04T20:30:40Z","updated_at":"2015-02-04T20:30:40Z","body":"@klali @mabels So I took some time to tinker with a copy of pam_yubico.c and compile it. \r\nI made modifications to the authorize_user_token_ldap function in pam_yubico.c which would allow the LDAP search (ldap_search_ext_s) to find a user object in sub-OUs of the specified ldapdn PAM module option. \r\nWe need this as our yubikey users will be scattered in various different OUs and sub-OUs. I've tested this modification against our Active Directory environment (LDAP) and so far so good.\r\nI'm a newby to this forum so I don't know if this is the appropriate location to display the changes I made. Nor am I familiar with which format they should be displayed here. But I'll post them if you are interested.\r\nCheers!"}}