passport-windowsauth

Question

为护照中间件passport-windowsauth提供管理员凭据以验证其他AD用户的原因是什么？

var passport = require('passport');
var WindowsStrategy = require('passport-windowsauth');

passport.use(new WindowsStrategy({
  ldap: {
    url:             'ldap://wellscordoba.wellscordobabank.com/DC=wellscordobabank,DC=com',
    base:            'DC=wellscordobabank,DC=com',
    bindDN:          'someAccount',
    bindCredentials: 'andItsPass'
  }
}, function(profile, done){
  User.findOrCreate({ waId: profile.id }, function (err, user) {
    done(err, user);
  });
}));

我认为不需要，ldap客户端可以将目标用户的凭据连接到AD，这意味着用户已经过身份验证。