[SSSD] [PATCHES] Use namingContext to set empty search bases

Simo Sorce ssorce at redhat.com
Wed Nov 3 12:48:21 UTC 2010


On Tue, 2 Nov 2010 22:39:45 +0100
Sumit Bose <sbose at redhat.com> wrote:

> diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml
> index 8c38ca7..2071eb4 100644
> --- a/src/man/sssd-ldap.5.xml
> +++ b/src/man/sssd-ldap.5.xml
> @@ -76,6 +76,13 @@
>                              The default base DN to use for
>                              performing LDAP user operations.
>                          </para>
> +                        <para>
> +                            Default: If not set the value of the
> namingContexts
> +                            attribute from the RootDSE of the LDAP
> server is
> +                            used. The namingContexts attribute must
> have a
> +                            single value with the DN of the search
> base of the
> +                            LDAP server to make this work.
> +                        </para>
>                      </listitem>
>                  </varlistentry>
>  
> @@ -1045,7 +1052,9 @@ ldap_access_filter =
> memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com </para>
>                          <para>
>                              Default: the value of
> -                            <emphasis>ldap_search_base</emphasis>
> +                            <emphasis>ldap_search_base</emphasis> or
> the value
> +                            of the namingContexts attribute of the
> RootDSE of the
> +                            LDAP server.
>                          </para>
>                      </listitem>
>                  </varlistentry>
> @@ -1059,7 +1068,9 @@ ldap_access_filter =
> memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com </para>
>                          <para>
>                              Default: the value of
> -                            <emphasis>ldap_search_base</emphasis>
> +                            <emphasis>ldap_search_base</emphasis> or
> the value
> +                            of the namingContexts attribute of the
> RootDSE of the
> +                            LDAP server.
>                          </para>
>                      </listitem>
>                  </varlistentry>
> @@ -1073,7 +1084,9 @@ ldap_access_filter =
> memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com </para>
>                          <para>
>                              Default: the value of
> -                            <emphasis>ldap_search_base</emphasis>
> +                            <emphasis>ldap_search_base</emphasis> or
> the value
> +                            of the namingContexts attribute of the
> RootDSE of the
> +                            LDAP server.
>                          </para>
>                      </listitem>
>                  </varlistentry>

NACK, with the change to support defaultNamingContext, these
explanations are not correct anymore.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York



More information about the sssd-devel mailing list