George Holbert wrote:
Is there any way to give a filtered role an alternate base DN? It
seems like the search scope for filtered roles is limited to the
container in which it's created. This means a role created in
"cn=roles,dc=example,dc=com" will not apply to entries in
"ou=people,dc=example,dc=com". Is the only solution to create the
role above the ou=people container?
That doesn't sound right. I thought that the base DN could be specified.
Sorry I don't have the cycles to check the docs and/or the code right now,
but I really thought that this was implemented already.