[SSSD] [PATCH] allow to add more LDAP user mappings

Simo Sorce ssorce at redhat.com
Tue Oct 6 16:02:05 UTC 2009


On Tue, 2009-10-06 at 16:45 +0200, Sumit Bose wrote:
> 
> this patch makes it possible to add more user attribute mappings. I
> need
> this (or a similar patch) to read password policy information from a
> LDAP server to evaluate if the password is expired on the client if
> the
> LDAP server does not support server side password policies. I have
> tired
> to make the changes in a generic way so they can be use for other
> areas
> as well.

Nack.
As discussed on IRC this approach exposes too much to the user.
A new patch will include attributes into the classic structures but will
define attribute groups like core (just posix stuff) vs all.

Simo.




More information about the sssd-devel mailing list