[SSSD] variable substitution in ldap_access_filter

Jakub Hrozek jhrozek at redhat.com
Mon May 7 12:02:20 UTC 2012


On Mon, May 07, 2012 at 01:41:35PM +0200, Angel Bosch wrote:
>    hi,
>    is there any variable substitution available in ldap_access_filter?
>    i'm (still) using posixgroup for user groups and i would like something
>    like:
>    ldap_access_filter = (&(cn=sysadmins)(memberuid=$USER))
>    regards,
>    abosch

No, there is no variable substitution possible at the moment.

Depending on what you are trying to achieve (sounds to me like you wanted
to only allow members of the sysadmin group?), would the simple access
provider be a better choice?



More information about the sssd-devel mailing list