[SSSD] SSSD host access behavior similar to /etc/ldap.conf groupdn in pam_ldap

DeMarco, Dennis J (RIS-BCT) Dennis.DeMarco at lexisnexis.com
Mon Jul 18 21:57:28 UTC 2011


I am trying to switch over from pam_ldap to use sssd authentication.

I have host based access based on a static ldap group and use the pam_groupdn attribute in /etc/ldap.conf to restrict access to hosts. I can not seem to replicate this behavior in SSSD. I have tried every combination of ldap_access_filter to no great success.

I do not have Memberof plugin in the old style Fedora DS 1.0.4. Is there a way for SSSD to use this style of host base authentication? I rather not go with a sssd/pam_ldap hybrid in system-auth.

Thanks,
Dennis



Example of my old setup for reference:


/etc/ldap.conf

Pam_groupdn cn=test,ou=LoginGroups,dc=example,dc=com

Example of the group ldiff

dn: cn=test,ou=LoginGroups,dc=example,dc=com
uniqueMember: uid=user1,ou=People, dc=example,dc=com
uniqueMember: uid=user2,ou=People,dc=example,dc=com
objectClass: top
objectClass: groupofuniquenames
cn: test
description: test account group



-----------------------------------------
The information contained in this e-mail message is intended only
for the personal and confidential use of the recipient(s) named
above. This message may be an attorney-client communication and/or
work product and as such is privileged and confidential. If the
reader of this message is not the intended recipient or an agent
responsible for delivering it to the intended recipient, you are
hereby notified that you have received this document in error and
that any review, dissemination, distribution, or copying of this
message is strictly prohibited. If you have received this
communication in error, please notify us immediately by e-mail, and
delete the original message.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110718/e4e6990b/attachment.html>


More information about the sssd-devel mailing list