On Wed, Nov 08, 2017 at 02:39:46PM -0500, Asif Iqbal wrote:
On Thu, Nov 2, 2017 at 12:05 PM, Asif Iqbal <vadud3(a)gmail.com>
wrote:
> Hi
>
> I like to authenticate user based on uid if meets the following two
> requirements
>
> ldap_search_base = ou=People,dc=mnet,dc=qintra,dc=com
> ldap_access_order = filter
> ldap_access_filter = objectClass=mnetPerson
>
> and
>
> ldap_search_base = ou=ACL Groups,ou=Groups,dc=mnet,dc=qintra,dc=com
> ldap_access_filter = (&(cn=jumpstation)(uniquemember=<dn of uid>))
It looks like you want that the user is a member of a group called
jumpstation? Does you user object have memberOf (or similar) attributes
which you can check together with objectClass=mnetPerson ?
bye,
Sumit
>
> Looking for a suggestion how to achieve this.
>
I suppose it is not possible?
>
>
> --
> Asif Iqbal
> PGP Key: 0xE62693C5 KeyServer:
pgp.mit.edu
> A: Because it messes up the order in which people normally read text.
> Q: Why is top-posting such a bad thing?
>
>
--
Asif Iqbal
PGP Key: 0xE62693C5 KeyServer:
pgp.mit.edu
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
_______________________________________________
sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org