On 09/07/2013 02:23 PM, Doug Clow wrote:
Hello,
I recently switched my sssd to 1.9 so I can try the native Active
Directory support. Previously I was using:
id_provider = ldap
auth_provider = krb5
chpass_provider = krb5
access_provider = ldap
And now with 1.9 I'm using:
id_provider = ad
auth_provider = ad
chpass_provider = ad
access_provider = ad
This works great except for one thing. ldap_access_filter no longer
does anything so everyone can log into all the machines. When I'm
using access_provider = ad how do I restrict which users and groups
have access to the machine?
There is no special access provider for AD back end so you still need to
use ldap or simple access provider as you used to do in the past.
Thanks,
Doug
_______________________________________________
sssd-users mailing list
sssd-users(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users
--
Thank you,
Dmitri Pal
Sr. Engineering Manager for IdM portfolio
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/