SSSD experts - Is it possible to simplify ldap searches like the one below
to specify the group name without it's full path:
```
ldap_user_search_base="DC=example,DC=internal?subtree?(|(memberOf=CN=project-users,OU=2,OU=1,DC=example,DC=internal)(memberOf=CN=project-admins,OU=2,OU=1,DC=example,DC=internal))
```
Doing so would simplify configurations and prevent issues when objects are
moved within the directory:
*p.s. for access_provider, the following has worked to simplify part of our
config. Likely means less load on LDAP. I'm assuming it's safe.*
````
id_provider=ldap
access_provider=simple
simple_allow_groups=group1, group2
```
--
Sean Roberts
Show replies by date