Thanks for your reply.
I though something like that, but I have some questions:
- What schema should I do mapping with? There are schemas like person,
organizationalPerson, xxxPerson, but there's no schema that looks
similar to posixAccount.
- There are no attributes like loginShell nor homeDirectory in the
schemas of this 3rd party LDAP Server. Can SSSD allow users login
without those attributes?
On Wed, Dec 18, 2013 at 4:31 PM, Ondrej Valousek <ovalousek(a)vendavo.com> wrote:
Try
man sssd-ldap
& things like ldap_user_object_class etc....
Simply yes, sssd supports custom attribute mapping.
O.
________________________________________
From: sssd-users-bounces(a)lists.fedorahosted.org
[sssd-users-bounces(a)lists.fedorahosted.org] on behalf of Jason Voorhees
[jvoorhees1(a)gmail.com]
Sent: Wednesday, December 18, 2013 10:25 PM
To: sssd-users(a)lists.fedorahosted.org
Subject: [SSSD-users] How to deal with non rfc2307 compliant schemas? (without
posixAccount)
Hi, this is my first post to this group, I hope someone can help me.
I'm interested to map ID mapping and authentication from a LDAP Server
in a CentOS 6.5 box.
The LDAP Server (running IBM TDS afaik) is managed by a third party
provider, so I just can make queries but not modifications.
I noted that there's no posixAccount objectClass in LDAP users, so I
wonder, How can I integrate those users using SSSD? This is an example
of my domain:
[
domain/custom.domain.com]
id_provider = ldap
auth_providers = ldap
chpass_provider = ldap
ldap_uri =
ldaps://directory.domain.com
ldap_tls_cacert = /etc/pki/tls/certs/ca-bundle.crt
#ldap_search_base = ""
ldap_id_use_start_tls = true
cache_credentials = false
enumerate = false
use_fully_qualified_names = false
#ldap_user_name = notesShortName
As you can see, I tried to use "ldap_user_name" but without luck. I'm
concerned about entries that don't exist on the LDAP server like
homeDirectory or loginShell. Can SSSD deal with those attributes not
present?
I like to use just the credentials (user authentication) from the LDAP
server to get my users logged in my linux box.
I hope someone understand this scenario and can be able to help me.
Thanks in advance.
_______________________________________________
sssd-users mailing list
sssd-users(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users
_______________________________________________
sssd-users mailing list
sssd-users(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users