getBoundRolesByOrg Returns Parent OU

[joerybka]

I am using Active Directory with this plugin, and everything is great except the getBoundRolesByOrg returns the OU in which the member's group resides and not the group name itself.

I had to change "ou" on line 448 in Ldap.php to "cn" instead to get the actual group name. I am not sure if this is expected behavior or not.

[relwell]

I'm pretty sure that other implementations require OU. My suggestion here would be to make this change configurable and then issue a pull request.