[SSSD] [PATCHES] Use namingContext to set empty search bases
Simo Sorce
ssorce at redhat.com
Wed Nov 3 12:48:21 UTC 2010
On Tue, 2 Nov 2010 22:39:45 +0100
Sumit Bose <sbose at redhat.com> wrote:
> diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml
> index 8c38ca7..2071eb4 100644
> --- a/src/man/sssd-ldap.5.xml
> +++ b/src/man/sssd-ldap.5.xml
> @@ -76,6 +76,13 @@
> The default base DN to use for
> performing LDAP user operations.
> </para>
> + <para>
> + Default: If not set the value of the
> namingContexts
> + attribute from the RootDSE of the LDAP
> server is
> + used. The namingContexts attribute must
> have a
> + single value with the DN of the search
> base of the
> + LDAP server to make this work.
> + </para>
> </listitem>
> </varlistentry>
>
> @@ -1045,7 +1052,9 @@ ldap_access_filter =
> memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com </para>
> <para>
> Default: the value of
> - <emphasis>ldap_search_base</emphasis>
> + <emphasis>ldap_search_base</emphasis> or
> the value
> + of the namingContexts attribute of the
> RootDSE of the
> + LDAP server.
> </para>
> </listitem>
> </varlistentry>
> @@ -1059,7 +1068,9 @@ ldap_access_filter =
> memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com </para>
> <para>
> Default: the value of
> - <emphasis>ldap_search_base</emphasis>
> + <emphasis>ldap_search_base</emphasis> or
> the value
> + of the namingContexts attribute of the
> RootDSE of the
> + LDAP server.
> </para>
> </listitem>
> </varlistentry>
> @@ -1073,7 +1084,9 @@ ldap_access_filter =
> memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com </para>
> <para>
> Default: the value of
> - <emphasis>ldap_search_base</emphasis>
> + <emphasis>ldap_search_base</emphasis> or
> the value
> + of the namingContexts attribute of the
> RootDSE of the
> + LDAP server.
> </para>
> </listitem>
> </varlistentry>
NACK, with the change to support defaultNamingContext, these
explanations are not correct anymore.
Simo.
--
Simo Sorce * Red Hat, Inc * New York
More information about the sssd-devel
mailing list