Hello,

 

I am migrating from pam_ldap to sssd and previously in my ldap.conf I was able to use this to filter out groups based on the “host” attribute using the nss_base_group feature:

nss_base_group  ou=Groups,dc=some,dc=company,dc=com?one?|(host=\2A)(host=somehost.test.com)(host=test)

 

I am trying to do the same thing in SSSD and can’t figure it out, I have added everything past the first ? above to my ldap_group_search_base stanza but it doesn’t work as expected, is it a syntax thing or is there a different way of doing this (or am I out of luck?)?

 

Thanks in advance!

-DBright