[SSSD] [PATCH] enable usage of defaultBindDn
Stephen Gallagher
sgallagh at redhat.com
Wed Aug 19 13:10:40 UTC 2009
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 08/19/2009 05:19 AM, Sumit Bose wrote:
> Hi,
>
> this patch addresses https://fedorahosted.org/sssd/ticket/109. It should
> now be possbile to get users with 'UNIX attributes' set from AD. For me
> the following config options worked:
>
> ...
> provider = ldap
> ldapUri = ldap://your.ldap.server
> userSearchBase = cn=users,dc=example,dc=com
> groupSearchBase = cn=groups,dc=example,dc=com
> defaultBindDn = cn=Administrator,cn=Users,dc=example,dc=com
> defaultAuthtokType = password
> defaultAuthtok = YOUR_PASSWORD
> userObjectClass = person
> userName = msSFU30Name
> userUidNumber = msSFU30UidNumber
> userGidNumber = msSFU30GidNumber
> userHomeDirectory = msSFU30HomeDirectory
> userShell = msSFU30LoginShell
> tls_reqcert = never
> ...
>
> I'm currently trying to get authentication against AD working, too. I
> will include a sample configuration and more man page option with a
> following patch.
>
> bye,
> Sumit
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/sssd-devel
Ack. I built and tested this patch against my own FreeIPA server
(binding as admin).
- --
Stephen Gallagher
RHCE 804006346421761
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAkqL+csACgkQeiVVYja6o6PTHQCfbcUVHCUMuiwuLI/UE2kDbScQ
XHYAoKgzsCs1MXcITp7TKFjePynsfkKN
=A+jh
-----END PGP SIGNATURE-----
More information about the sssd-devel
mailing list