[SSSD] [PATCH] Add LDAP access control based on NDS attributes

Stephen Gallagher sgallagh at redhat.com
Fri Jul 8 19:21:39 UTC 2011


On Thu, 2011-06-23 at 09:54 -0400, Stephen Gallagher wrote:
> On Thu, 2011-06-23 at 13:48 +0200, Sumit Bose wrote:
> > Hi,
> > 
> > this patch adds support for the NDS/eDirectory access control attributes
> > loginDisabled, loginExpirationTime and loginAllowedTimeMap. It is not
> > fully tested because currently I do not have access to an eDirectory
> > server. Since the impact on other parts of the code is minimal I didn't
> > add a seperate configure option for it but only mark it in the man page
> > as experimental.
> > 
> > I you have a chance to test this feature please let me know the result.
> 
> 
> I was a little concerned about the use of strptime() for the account
> expiration check, but after doing some digging I see that NDS is
> (supposed to) guarantee leading zeroes which will eliminate any
> potential ambiguity.
> 
> Ack.

Pushed to master.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110708/ebd52a39/attachment.sig>


More information about the sssd-devel mailing list