Enh : Authentification problem : UserprincipalName and Email messed up

[DessaiImrane]

Hi,

I have in my AD 2 account with same Email address but (of course) with two Samaccount (and UPN) different.

User 1 : 
UPN : [email protected]
Email : [email protected]

User 2 : 
UPN : [email protected]
Email : [email protected]

Two contacts in shinken

define contact{
    contact_name    [email protected]
    email           [email protected]
}

define contact{
    contact_name    [email protected]
    email           [email protected]
}

When USER1 try to authenticate, we got this error from broker

[Active Directory UI] Ldap auth error: {'info': '80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db1', 'desc': 'Invalid credentials'}

I think this module should use something stronger to deal with such case as "mail" is not an "unique key" in AD Ldap Schemas but CN/UPN/Samaccountname are.

Maybe not using "OR" but an "AND" in filter ?
Or not using "mail" in filter at all ? (only samaccountname, UPN and CN )

What do you think ?

[DessaiImrane]

Related with #10