check ldap group membership when logging in subsequently

models/ldap.go

@@ -262,7 +262,7 @@ func LdapGetGroupMembership(username string, password string) ([]string, error)
 	return groups, nil
 }
 
-// No need to check group memberships, just validate that we can bind successfully
+// VerifyLdapCreds validates that we can bind successfully to LDAP with the supplied credentials
 func VerifyLdapCreds(username string, password string) error {
 	var err error
 	username = CheckUsername(username)