// directory.
	for _, baseDN := range baseDNList {
		if baseDN.Parsed.AncestorOf(pdn) {
			return searchRes, true, nil
		}
	}

	// Not under any configured base DN so return false.
	return searchRes, false, nil
}

// GetValidatedDNWithGroups - Gets validated DN from given DN or short username
// and returns the DN and the groups the user is a member of.
//

The returned user's DN and their password are then verified with the LDAP server. The user DN may also be associated with an [access policy](#managing-usergroup-access-policy).

The User DN attributes configuration parameter:
```
MINIO_IDENTITY_LDAP_USER_DN_ATTRIBUTES      (list)      "," separated list of user DN attributes e.g. "uid,cn,mail,sshPublicKey"
```

		}) {
			writeErrorResponseJSON(ctx, w, errorCodes.ToAPIErr(ErrAccessDenied), r.URL)
			return
		}
	} else if len(dnList) == 1 {
		var dn string
		foundResult, err := globalIAMSys.LDAPConfig.GetValidatedDNForUsername(dnList[0])
		if err == nil {
			dn = foundResult.NormDN
		}
		if dn == cred.ParentUser || dnList[0] == cred.ParentUser {
			selfOnly = true
		}
	}

	if !globalIAMSys.IsAllowed(policy.Args{

labels.targetLabel=Label
labels.term=Term
labels.fields=Fields
labels.ex_q=Extended Query
labels.ldapProviderUrl=LDAP URL
labels.ldapSecurityPrincipal=User DN
labels.ldapAdminSecurityPrincipal=Bind DN
labels.ldapAdminSecurityCredentials=Password
labels.ldapBaseDn=Base DN
labels.ldapAccountFilter=Account Filter
labels.ldapGroupFilter=Group Filter
labels.ldapMemberofAttribute=memberOf Attribute
labels.oldPassword=Current Password

labels.targetLabel=Label
labels.term=Begriff
labels.fields=Felder
labels.ex_q=Erweiterte Query
labels.ldapProviderUrl=LDAP-URL
labels.ldapSecurityPrincipal=Benutzer-DN
labels.ldapAdminSecurityPrincipal=Bind-DN
labels.ldapAdminSecurityCredentials=Passwort
labels.ldapBaseDn=Basis-DN
labels.ldapAccountFilter=Konto-Filter
labels.ldapMemberofAttribute=memberOf-Attribut
labels.oldPassword=Aktuelles Passwort
labels.newPassword=Neues Passwort

                + "     #jdfagdfjagkdjfghksdajfd\n"
                + "     \n"
                + "!!properties\n"
                + "\n"
                + "a=a\n"
                + "b bb as,dn   \n"
                + "c\\r\\ \\t\\nu =:: cu\n"
                + "bu= b\\\n"
                + "                u\n"
                + "d=d\\r\\ne=e\n"
                + "f   :f\\\n"
                + "f\\\n"

labels.targetLabel=Название
labels.term=Срок
labels.fields=Поля
labels.ex_q=Расширенный запрос
labels.ldapProviderUrl=LDAP URL
labels.ldapSecurityPrincipal=User DN
labels.ldapAdminSecurityPrincipal=Привязать DN
labels.ldapAdminSecurityCredentials=Password
labels.ldapBaseDn=Базовый DN
labels.ldapAccountFilter=Фильтр аккаунта
labels.oldPassword=Текущий пароль
labels.newPassword=Новый пароль
labels.confirmNewPassword=Новый пароль(Подтвердить)

labels.targetLabel=Label
labels.term=Term
labels.fields=Fields
labels.ex_q=Extended Query
labels.ldapProviderUrl=LDAP URL
labels.ldapSecurityPrincipal=User DN
labels.ldapAdminSecurityPrincipal=Bind DN
labels.ldapAdminSecurityCredentials=Password
labels.ldapBaseDn=Base DN
labels.ldapAccountFilter=Account Filter
labels.ldapGroupFilter=Group Filter
labels.ldapMemberofAttribute=memberOf Attribute
labels.oldPassword=Current Password

labels.term	=	Terme
labels.fields	=	Des champs
labels.ex_q	=	Requête étendue
labels.ldapProviderUrl	=	URL LDAP
labels.ldapSecurityPrincipal	=	DN de l'utilisateur
labels.ldapAdminSecurityPrincipal	=	Bind DN
labels.ldapAdminSecurityCredentials	=	Mot de passe
labels.ldapBaseDn	=	DN de base
labels.ldapAccountFilter	=	Filtre de compte
labels.ldapGroupFilter	=	Filtre de groupe
labels.ldapMemberofAttribute	=	Attribut memberOf

labels.ldapProviderUrl = LDAP URL
labels.ldapSecurityPrincipal = User DN
labels.ldapAdminSecurityPrincipal = Bind DN
labels.ldapAdminSecurityCredentials = 비밀번호
labels.ldapBaseDn = Base DN
labels.ldap_provider_url = LDAP URL
labels.ldap_security_principal = User DN
labels.ldap_admin_security_principal = Bind DN
labels.ldap_admin_security_credentials = 비밀번호
labels.ldap_base_dn = Base DN
labels.ldapAccountFilter = 계정 필터