Per discussion on Slack - add ability to match username and wildcard combinations in cgi.cfg, allowing LDAP users to be matched by username patterns:

Current behaviour allows * to be used to match "ANY" user:
authorized_for_configuration_information = *

But in combination with another string, * does not do anything - this doesn't match usernames ending with "admin":
authorized_for_configuration_information = *admin

Feature would either support full regex, or more simple string matching:

testuser = t*r
testuser = te?tu?er

As a stretch, it would be more useful to be able to pass through LDAP matched groups from the webserver to Thruk to allow AD group-level permissions to be applied.

I.e. using Apache, if user is authenticated against the group below, Apache should rewrite something which Thruk can base authentication on:

Require ldap-group cn=groupname,ou=groups,dc=test

I guess this would necessitate creating/populating contact groups on the fly, or allowing Thruk to authenticate based on another "group" object.