* given user when the target object's ACL has local groups. Local groups
     * are not listed in a user's group membership (e.g. as represented by the
     * tokenGroups constructed attribute retrieved via LDAP).
     *
     * Domain groups nested inside a local group are currently not expanded. In
     * this case the key (SID) type will be SID_TYPE_DOM_GRP rather than
     * SID_TYPE_USER.
     *
     * @param tc

	xhttp "github.com/minio/minio/internal/http"
	"github.com/minio/minio/internal/mcontext"
)

var ldapPwdRegex = regexp.MustCompile("(^.*?)LDAPPassword=([^&]*?)(&(.*?))?$")

// redact LDAP password if part of string
func redactLDAPPwd(s string) string {
	parts := ldapPwdRegex.FindStringSubmatch(s)
	if len(parts) > 3 {
		return parts[1] + "LDAPPassword=*REDACTED*" + parts[3]
	}
	return s
}

labels.general_menu_logging=日誌記錄
labels.general_menu_suggest=建議
labels.general_menu_ldap=LDAP
labels.general_menu_notification=顯示通知
labels.general_storage=儲存
labels.ldapProviderUrl=LDAP URL
labels.ldapSecurityPrincipal=使用者DN
labels.ldapAdminSecurityPrincipal=綁定DN
labels.ldapAdminSecurityCredentials=密碼
labels.ldapBaseDn=基本DN
labels.ldap_provider_url=LDAP URL
labels.ldap_security_principal=使用者DN
labels.ldap_admin_security_principal=綁定DN

     * @return true if the value should be masked, false otherwise
     */
    protected static boolean isMaskedValue(final String key) {
        return "http.proxy.password".equals(key) //
                || "ldap.admin.security.credentials".equals(key) //
                || "spnego.preauth.password".equals(key) //
                || "app.cipher.key".equals(key) //
                || "oic.client.id".equals(key) //

## Introduction

MinIO provides a custom STS API that allows authentication with client X.509 / TLS certificates.

A major advantage of certificate-based authentication compared to other STS authentication methods, like OpenID Connect or LDAP/AD, is that client authentication works without any additional/external component that must be constantly available. Therefore, certificate-based authentication may provide better availability / lower operational complexity.

labels.general_menu_suggest=Vorschlagen
labels.general_menu_ldap=LDAP
labels.general_menu_notification=Benachrichtigung
labels.general_storage=Speicher
labels.ldapProviderUrl=LDAP-URL
labels.ldapSecurityPrincipal=Benutzer-DN
labels.ldapAdminSecurityPrincipal=Bind-DN
labels.ldapAdminSecurityCredentials=Passwort
labels.ldapBaseDn=Basis-DN
labels.ldap_provider_url=LDAP-URL
labels.ldap_security_principal=Benutzer-DN

- Access to bucket(s) and object(s) are governed via IAM policies associated with the incoming
  login credentials.

- Allows authentication and access for all
  - Built-in IDP users and their respective service accounts
  - LDAP/AD users and their respective service accounts
  - OpenID/OIDC service accounts

- On versioned buckets, FTP/SFTP only operates on latest objects, if you need to retrieve

labels.general_menu_suggest=Предложения
labels.general_menu_ldap=LDAP
labels.general_menu_notification=Уведомление
labels.general_storage=Хранилище
labels.ldapProviderUrl=URL-адрес LDAP
labels.ldapSecurityPrincipal=DN пользователя
labels.ldapAdminSecurityPrincipal=DN привязки
labels.ldapAdminSecurityCredentials=Пароль
labels.ldapBaseDn=Базовый DN
labels.ldap_provider_url=URL-адрес LDAP
labels.ldap_security_principal=DN пользователя

labels.general_menu_suggest=Suggerisci
labels.general_menu_ldap=LDAP
labels.general_menu_notification=Mostra notifica
labels.general_storage=Archiviazione
labels.ldapProviderUrl=URL LDAP
labels.ldapSecurityPrincipal=DN utente
labels.ldapAdminSecurityPrincipal=DN bind
labels.ldapAdminSecurityCredentials=Password
labels.ldapBaseDn=DN base
labels.ldap_provider_url=URL LDAP
labels.ldap_security_principal=DN utente

labels.general_menu_suggest=Sugestia
labels.general_menu_ldap=LDAP
labels.general_menu_notification=Pokaż powiadomienie
labels.general_storage=Przechowywanie
labels.ldapProviderUrl=URL LDAP
labels.ldapSecurityPrincipal=DN użytkownika
labels.ldapAdminSecurityPrincipal=DN powiązania
labels.ldapAdminSecurityCredentials=Hasło
labels.ldapBaseDn=Podstawowy DN
labels.ldap_provider_url=URL LDAP
labels.ldap_security_principal=DN użytkownika