LDAP Should Honor the DN Authority, Also Avoid Nonexistent Users

[Dan Wells]

Descriptions stolen from the commits (there are two):

Commit #1:
The existing version of LDAP_Auth.pm assumed that the user's bind DN could be derived from the base DN, the ID attribute, and the user's ID. This is frequently the case, but not always, particularly in Active Directory setups using sAMAccountName. This commit instead uses the initial LDAP lookup as the authority for determining the user's DN.

Commit #2:
The current AuthProxy.pm code assumes that if the external auth passes, the Evergreen account will be there. This protects against cases where a user is in the external auth system but has no matching account in Evergreen.

While these are only somewhat unrelated, the number or users who might actually test this are small enough that I would hope they could be tested and committed together.

Branch at:

http://git.evergreen-ils.org/?p=working/Evergreen.git;a=shortlog;h=refs/heads/user/dbwells/LDAP_DN_and_user_fixes

working/user/dbwells/LDAP_DN_and_user_fixes

[Bill Erickson (berick)]

Tested with Active Directory / sAMAccountName and it solved my problem. Thanks, Dan! Pushed to 2.3+