From 9387a52411b36486068a18d59fafbbedb9c7a0e2 Mon Sep 17 00:00:00 2001
From: "Adam Thompson [MERLIN]" <athompson@merlin.mb.ca>
Date: Sun, 29 Mar 2020 09:40:09 -0500
Subject: [PATCH] clarify warning

Existing warnings imply that only WS2012 is affected, when in fact it's WS2012 and newer.
---
 configuration/ldap_config.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/configuration/ldap_config.py b/configuration/ldap_config.py
index ba2067c..d59b1e8 100644
--- a/configuration/ldap_config.py
+++ b/configuration/ldap_config.py
@@ -35,6 +35,7 @@ AUTH_LDAP_BIND_DN = os.environ.get('AUTH_LDAP_BIND_DN', '')
 AUTH_LDAP_BIND_PASSWORD = os.environ.get('AUTH_LDAP_BIND_PASSWORD', read_secret('auth_ldap_bind_password'))
 
 # Set a string template that describes any user’s distinguished name based on the username.
+# DO NOT SET THIS VARIABLE when using Active Directory on  Windows Server 2012 or later
 AUTH_LDAP_USER_DN_TEMPLATE = os.environ.get('AUTH_LDAP_USER_DN_TEMPLATE', None)
 
 # Include this setting if you want to ignore certificate errors. This might be needed to accept a self-signed cert.