I'm using the WPMU LDAP plug-in to authenticate site editors, and also - combined with the More Privacy Options plug-in - to restrict reading of some sites to just people in our organization.
But here's my problem: reading of some sites needs to be restricted only to certain users, based on the value of a specific LDAP attribute. On a now-WP site, I'd do it with AuthLDAP and a search filter in httpd.conf, but that approach seems to cause problems with WordPress, and it's ugly anyway...
I gather it's not directly possible in WPMU LDAP, but any suggestions how to start modifying it? I can't change it globally, or all sites will be restricted.
I tried chaining WPMU LDAP with another LDAP plug-in (wpDirAuth) but couldn't get it right. Theory was all LDAP users would get through WPMU LDAP, but the second plug-in (just on sites that needed it) would have a filter for the LDAP attribute. But I don't think it liked having two layers of authentication.
I have no control over the LDAP directory, like I can't change it to put the right people in groups. All I have to go on is the attribute for the user's department. It's OpenLDAP, I think - definitely Linux type, not AD.
Any help appreciated. Thanks.