[SSSD] [PATCHES][PRELIMINARY] Add support for AD's chain matching filter

Stephen Gallagher sgallagh at redhat.com
Tue Jun 12 13:25:34 UTC 2012


On Tue, 2012-06-12 at 08:51 -0400, Simo Sorce wrote:
> On Tue, 2012-06-12 at 08:45 -0400, Stephen Gallagher wrote:
> > Well, at RootDSE discovery time, we search only the RootDSE with a base
> > search. Base searches ignore the filter, so we need to make a separate
> > request. I'm currently investigating just doing a onelevel search of the
> > user_search_base for an attribute unlikely to exist. This should be
> > sufficient.
> 
> Or you could search for an account that almost always exists
> (administrator).


Well, as I said to Jan earlier, I'd rather make this more generic. I
intend to recommend that 389 DS add this feature, and it's possible that
other servers out there implement it as well. I'd rather just solve this
problem once.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120612/1eb5b16b/attachment.sig>


More information about the sssd-devel mailing list