使用net-ldap登录Active Directory“无环境”(Active Directory “contextless” login with net-ldap)

 我正在写一个Rails 3.2应用程序，作为身份验证，我想使用Net :: LDAP连接到公司MS ADDS。 我可以使用Net :: LDAP对用户进行身份验证。 问题是我的用户存在于不同的OU中，因此我想进行“无环境”登录。 不确定它是否在Microsoft世界中被称为无环境。 我来自Novell的背景。 
 
 我所知道的是不必提供FQDN，只需提供sAMAccountName和密码。 ：基本选项似乎锁定了我在该上下文中并期望用户仅存在于该OU中。 
 
 我是否必须先与用户绑定（FQDN），然后进行过滤搜索或什么？ 任何建议都是受欢迎的。 

I'm writting a Rails 3.2 application and as authentication I want to use Net::LDAP to connect to the company MS ADDS. I can authenticate a user with Net::LDAP. The problem is that my users exists in different OU's so I would like to do a "contextless" login. Not sure if it is called contextless in the Microsoft world. I come from a Novell background.
 
What I meen is to not have to give the FQDN, just the sAMAccountName and password. The :base options seems to lock me in that context and expects the users to exist in that OU alone.
 
Do I have to bind with a user first(FQDN) then do a filter search or what? Any suggesions are welcome.

原文：https://stackoverflow.com/questions/15094354