Allow login of simpleSecurityObjects

ldap.go

@@ -65,11 +65,16 @@ func (l LDAPConn) Bind(username string, password string) error {
 	return l.connection.Bind(username, password)
 }
 
-func (l LDAPConn) SearchDN(username string) (string, error) {
+func (l LDAPConn) SearchDN(username string, person bool) (string, error) {
+	objectClass := "organizationalPerson"
+	if !person {
+		objectClass = "simpleSecurityObject"
+	}
+
 	searchRequest := ldap.NewSearchRequest(
 		l.BaseDN,
 		ldap.ScopeWholeSubtree, ldap.NeverDerefAliases, 0, 0, false,
-		fmt.Sprintf("(&(objectClass=organizationalPerson)(uid=%s))", username),
+		fmt.Sprintf("(&(objectClass=%s)(uid=%s))", objectClass, username),
 		[]string{"dn"},
 		nil,
 	)