[NEW] Accept variable #{userdn} on LDAP group filter (#16273)

RocketChat · May 30, 2020 · e4aebd2 · e4aebd2
1 parent ae95908
commit e4aebd2
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/ldap/server/sync.js b/app/ldap/server/sync.js
@@ -28,7 +28,7 @@ export function isUserInLDAPGroup(ldap, ldapUser, user, ldapGroup) {
 		return false;
 	}
 	const searchOptions = {
-		filter: syncUserRolesFilter.replace(/#{username}/g, user.username).replace(/#{groupName}/g, ldapGroup),
+		filter: syncUserRolesFilter.replace(/#{username}/g, user.username).replace(/#{groupName}/g, ldapGroup).replace(/#{userdn}/g, ldapUser.dn),
 		scope: 'sub',
 	};