I continue with my list
* the server should be able to return the members of dynamic groups "on the fly" as if it were real members,
the membership attribute should be configurable - uniqueMember, member
or another
* support of other virtual attributes generated "on the fly"
* pam passthrough plug-in should take into account at least the account activation/desactivation (bug 470684 ). There is a comment about some additional useful features it in th README file of this plug-in :
We need to worry about account expiration or lockout e.g. the user's
credentials are valid but the user has been locked out of his/her
account, or the password has expired, or something like that. Some of
this can be handled by LDAP e.g. returning password policy control
values when the password has expired.
Thanks - I've added these notes to http://directory.fedoraproject.org/wiki/Roadmap#Version_1.3
Anyone else? C'mon - surely you have an opinion about a new feature.
Thanks for all your hard work on this!