It should be possible to login with an attribute value that is not part of the user distinguished name

Current Situation

If the user distinguished name does not contain a short unique ID as from the attribute sAMACountName then the user has to login with the common name stated in the distinguished name.

Desired Behaviour

It should be possible to configure a filter to identify the user that logs in with a short unique attribute like the sAMAcountName. The userDnTemplate should be substituted with a given userNameAttribute instead of the value from the login name. The same filter should be used to identify the user for the group search substitution as the group entry stores the user distinguished name in the member attribute.

Exampel:

• The distinguised name of Fritz Tester is {CN=Fritz Tester,CN=sos,DC=berlin,DC=com}
• Fritz Tester has the attribute {uid=fTester)
• Fritz wants to login with fTester