LDAP_FILTER with or / login with mail or uid

[baba2k]

Hi @wheelybird ,

is it possible to login with uid or mail? Actually (&(uid=baba)) will be added, so no "OR" is possible:
(&(|(uid=baba)(mail=baba))(objectClass=person)(memberOf=cn=openvpn,ou=groups,dc=example,dc=com))

Thanks!

[wheelybird]

Hi. Sorry about the slow reply.
LDAP_FILTER is, as you say, appended to the user lookup and is used to filter the results rather than specify which attribute is used for the user match. LDAP_LOGIN_ATTRIBUTE is used to specify that attribute, but this uses maps ("map passwd uid $login_attribute") and I don't believe you can have multiple attributes mapped to uid.
Looking though the man pages for nscld.conf I don't believe that logging in with mail or uid is possible (https://manpages.ubuntu.com/manpages/focal/en/man5/nslcd.conf.5.html)