mod_authnz_ldap can accept only one attribute according to the docs. Is there a strategy to check first UPN, then samaccountname using mod_authnz_ldap? Or is there an alternate module that can do this? And looking for two attributes is there a way to control what gets returned? My PHP developer grabs the name post login to select the account in the app database. Company employees need to use the UPN, but contractors need to use the sam.
This thread would indicate that you can use two attributes in AuthLDAPUrl, but the docs say otherwise. AuthLDAPRemoteUserAttribute could lead one to believe that you CAN query more than one attribute.
