[SSSD] SSSD Configuration issue
Nitesh Mehare
nitesh26 at gmail.com
Fri Nov 11 08:36:45 UTC 2011
Jakub,
The group entry looks like this
cn=idsldap,ou=People,o=sample
cn=idsldap
objectclass=posixgroup
objectclass=top
gidnumber=201
memberuid=nitpta2
memberuid=nitinst
memberuid=nitinst1
memberuid=nitback1
The group entry is under ou=people and any user is made member of a group
by adding the memberuid attribute so i have kept ldap_schema as rfc2307
Thanks
On Fri, Nov 11, 2011 at 1:57 PM, Jakub Hrozek <jhrozek at redhat.com> wrote:
> On Fri, Nov 11, 2011 at 12:02:31PM +0530, Nitesh Mehare wrote:
> > # data about the user itself. If you do not know this value, ask an
> > # administrator.
> > A [domain/LDAP]
> > A debug_level = 9
> > A id_provider = ldap
> > A auth_provider = ldap
> > A ldap_schema = rfc2307
> > A access_provider = ldap
> > A ldap_access_filter = memberOf=cn=idsldap,ou=People,o=sample
> > A ldap_uri = ldap://lbullet.in.ibm.com
> > A ldap_search_base = ou=People,o=sample
> > A ldap_tls_reqcert = never
> > A cache_credentials = false
> > A enumerate = False
>
> How are group membership links determined in your directory?
>
> If you're using member/memberof pairs as your ldap_access_filter
> suggests, you should probably use "ldap_schema = rfc2307bis".
>
> The configuration specifies "schema=rfc2307" which implies
> "memberuid" attributes with username values.
>
> Also, the search base points to "ou=People" container, is it really
> where the groups are stored as well?
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/sssd-devel
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20111111/7137867a/attachment.html>
More information about the sssd-devel
mailing list