ldap

type LdapGroup struct {
	Path string
	Role easyauth.Role
}

type LdapProvider struct {
	//name of domain
	Domain string
	//user base dn (for LDAP Auth)
	UserBaseDn string
	//server to query
	LdapAddr string
	//if untrusted certs should be allowed
	AllowInsecure bool
	//Permissions granted to any user who successfully authenticates
	DefaultPermission easyauth.Role
	//List of groups to grant additional permissions
	Groups []*LdapGroup
	//Individual user permissions
	Users map[string]easyauth.Role
	//Root search path to check group memberships. Ex "DC=myorg,DC=com"
	RootSearchPath string

	//Name to use for cookie
	CookieName string

	// Function to call on successful login. Can change user data or roles if desired.
	// return non-nil error to deny the login
	OnLogin func(u *easyauth.User) error

	OnLoginFail func(string)
}