[SSSD] [PATCH] Add LDAP access control based on NDS attributes

Stephen Gallagher sgallagh at redhat.com
Thu Jun 23 13:54:26 UTC 2011


On Thu, 2011-06-23 at 13:48 +0200, Sumit Bose wrote:
> Hi,
> 
> this patch adds support for the NDS/eDirectory access control attributes
> loginDisabled, loginExpirationTime and loginAllowedTimeMap. It is not
> fully tested because currently I do not have access to an eDirectory
> server. Since the impact on other parts of the code is minimal I didn't
> add a seperate configure option for it but only mark it in the man page
> as experimental.
> 
> I you have a chance to test this feature please let me know the result.


I was a little concerned about the use of strptime() for the account
expiration check, but after doing some digging I see that NDS is
(supposed to) guarantee leading zeroes which will eliminate any
potential ambiguity.

Ack.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110623/33ce07ea/attachment.sig>


More information about the sssd-devel mailing list