// directory.
	for _, baseDN := range baseDNList {
		if baseDN.Parsed.AncestorOf(pdn) {
			return searchRes, true, nil
		}
	}

	// Not under any configured base DN so return false.
	return searchRes, false, nil
}

// GetValidatedDNWithGroups - Gets validated DN from given DN or short username
// and returns the DN and the groups the user is a member of.
//

The returned user's DN and their password are then verified with the LDAP server. The user DN may also be associated with an [access policy](#managing-usergroup-access-policy).

The User DN attributes configuration parameter:
```
MINIO_IDENTITY_LDAP_USER_DN_ATTRIBUTES      (list)      "," separated list of user DN attributes e.g. "uid,cn,mail,sshPublicKey"
```

		}) {
			writeErrorResponseJSON(ctx, w, errorCodes.ToAPIErr(ErrAccessDenied), r.URL)
			return
		}
	} else if len(dnList) == 1 {
		var dn string
		foundResult, err := globalIAMSys.LDAPConfig.GetValidatedDNForUsername(dnList[0])
		if err == nil {
			dn = foundResult.NormDN
		}
		if dn == cred.ParentUser || dnList[0] == cred.ParentUser {
			selfOnly = true
		}
	}

	if !globalIAMSys.IsAllowed(policy.Args{

                + "     #jdfagdfjagkdjfghksdajfd\n"
                + "     \n"
                + "!!properties\n"
                + "\n"
                + "a=a\n"
                + "b bb as,dn   \n"
                + "c\\r\\ \\t\\nu =:: cu\n"
                + "bu= b\\\n"
                + "                u\n"
                + "d=d\\r\\ne=e\n"
                + "f   :f\\\n"
                + "f\\\n"

        assertNull(ldapManager.getSearchRoleName(""));
        assertNull(ldapManager.getSearchRoleName("   "));
        assertNull(ldapManager.getSearchRoleName("no_cn_prefix"));
        assertNull(ldapManager.getSearchRoleName("dn=test"));
    }

    @Test
    public void test_replaceWithUnderscores_withEdgeCases() {
        LdapManager ldapManager = new LdapManager();
        ldapManager.init();

        // Edge cases

          throw SSLPeerUnverifiedException(
            """
            |Hostname ${address.url.host} not verified:
            |    certificate: ${CertificatePinner.pin(cert)}
            |    DN: ${cert.subjectDN.name}
            |    subjectAltNames: ${OkHostnameVerifier.allSubjectAltNames(cert)}
            """.trimMargin(),
          )
        } else {
          throw SSLPeerUnverifiedException(

     * Used in conjunction with the admin security principal.
     */
    @Size(max = 1000)
    public String ldapAdminSecurityCredentials;

    /**
     * LDAP base DN (Distinguished Name) for user searches.
     * Defines the root of the LDAP directory tree for user lookups.
     */
    @Size(max = 1000)
    public String ldapBaseDn;

    /**

	issClaim = "iss"

	// JWT claim to check the parent user
	parentClaim = "parent"

	// LDAP claim keys
	ldapUser       = "ldapUser"       // this is a key name for a normalized DN value
	ldapActualUser = "ldapActualUser" // this is a key name for the actual DN value
	ldapUserN      = "ldapUsername"   // this is a key name for the short/login username
	// Claim key-prefix for LDAP attributes
	ldapAttribPrefix = "ldapAttrib_"

    // LDAP Configuration Constants
    // ============================================================

    /** LDAP base DN configuration key. */
    public static final String LDAP_BASE_DN = "ldap.base.dn";

    /** LDAP security principal configuration key. */
    public static final String LDAP_SECURITY_PRINCIPAL = "ldap.security.principal";

labels.general_storage=儲存
labels.ldapProviderUrl=LDAP URL
labels.ldapSecurityPrincipal=使用者DN
labels.ldapAdminSecurityPrincipal=綁定DN
labels.ldapAdminSecurityCredentials=密碼
labels.ldapBaseDn=基本DN
labels.ldap_provider_url=LDAP URL
labels.ldap_security_principal=使用者DN
labels.ldap_admin_security_principal=綁定DN
labels.ldap_admin_security_credentials=密碼
labels.ldap_base_dn=基本DN
labels.ldapAccountFilter=帳戶過濾器
labels.ldapGroupFilter=組過濾器