Openshift LDAP User login filtered by Group

Openshift-LDAP-User-login-filtered-by-Group

Filter Syntax Example:
https://social.technet.microsoft.com/wiki/contents/articles/5392.active-directory-ldap-syntax-filters.aspx
-------------------------------------------------------------------------------------------------------------

https://access.redhat.com/solutions/3510401

Can be done in 4.X version by editing OAuth resource definition, like in the following example:

apiVersion: config.openshift.io/v1
kind: OAuth
metadata:
  name: cluster
spec:
  identityProviders:
  - ldap:
      apiVersion: v1
      attributes:
        email:
        - mail
        id:
        - dn
        name:
        - cn
        preferredUsername:
        - sAMAccountName
      bindDN: cn=UserSearch,ou=users,dc=example,dc=co,dc=id
      bindPassword:
        name: ldap-secret
      insecure: false
      url: ldap://ADserver.example.co.id/DC=example,DC=co,DC=id?sAMAccountName?sub?(memberOf=cn=allow_access_ocp4,dc=example,dc=co,dc=id)
    login: true
    mappingMethod: claim
    name: ldap_provider
    type: LDAP
    
 --------------------------------------------------------
 To check whether the Query is correct or not, try to curl the URL :
 # curl --user [email protected] ldap://ADserver.example.co.id/DC=example,DC=co,DC=id?sAMAccountName?sub?(memberOf=cn=allow_access_ocp4,dc=example,dc=co,dc=id)