[SSSD] [PATCH] Extend the LDAP attribute map with custom options

Jakub Hrozek jhrozek at redhat.com
Mon Apr 28 20:20:08 UTC 2014


On Fri, Apr 25, 2014 at 12:05:23PM +0200, Jan Pazdziora wrote:
> On Fri, Apr 25, 2014 at 11:42:14AM +0200, Jakub Hrozek wrote:
> > 
> > I don't really mind too much and appears Jan does not either. So I
> > simply swapped the order in the attached patches, now it's sysdb:LDAP.
> > 
> > Man page was changed accordingly.
> > 
> > Jan, could you check if the man page change (src/man/sssd-ldap.5.xml in
> > the second patch) reads good to you?
> 
> [...]
> 
> >  ldap_user_uid_number = str, None, false
> > diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml
> > index f93b418c45d9bcd32499860a858c3f829bb245ca..6426fe4fca5dc9bb9bc84fcbf633404144052d01 100644
> > --- a/src/man/sssd-ldap.5.xml
> > +++ b/src/man/sssd-ldap.5.xml
> > @@ -616,6 +616,54 @@
> >                      </listitem>
> >                  </varlistentry>
> >  
> > +                <varlistentry>
> > +                    <term>ldap_user_extra_attrs (string)</term>
> > +                    <listitem>
> > +                        <para>
> > +                            Comma-separated list of LDAP attributes that SSSD
> > +                            would fetch along with the usual set of user
> > +                            attributes.
> > +                        </para>
> > +                        <para>
> > +                            The list can either contain LDAP attribute names
> > +                            only, or colon-separated tuples of SSSD cache
> > +                            attribute name and LDAP attribute name. In
> > +                            case only LDAP attribute name is specified,
> > +                            the attribute is saved to the cache verbatim.
> > +                            Using a custom SSSD attribute name might be
> > +                            required by environments that configure several
> > +                            SSSD domains with different LDAP schemas.
> > +                        </para>
> > +                        <para>
> > +                            Please note that several attribute names are
> > +                            reserved by SSSD, notably the <quote>name</quote>
> > +                            attribute. SSSD would report an error if any of
> > +                            the reserved attribute names is used as an extra
> > +                            attribute name.
> > +                        </para>
> > +                        <para>
> > +                            Examples:
> > +                        </para>
> > +                        <para>
> > +                            ldap_user_extra_attrs = telephoneNumber
> > +                        </para>
> > +                        <para>
> > +                            Save the <quote>telephoneNumber</quote> attribute from LDAP
> > +                            as <quote>telephoneNumber</quote> to the cache.
> > +                        </para>
> > +                        <para>
> > +                            ldap_user_extra_attrs = phone:telephoneNumber
> > +                        </para>
> > +                        <para>
> > +                            Save the <quote>telephoneNumber</quote> attribute from LDAP
> > +                            as <quote>phone</quote> to the cache.
> > +                        </para>
> > +                        <para>
> > +                            Default: not set
> > +                        </para>
> > +                    </listitem>
> > +                </varlistentry>
> 
> It reads very well.
> 
> Once I have stable .src.rpm, I'll test if the behaviour matches the
> man page as well.

Hi,

can I get a final ACK (or a non-file NACK :-)) on the patches?



More information about the sssd-devel mailing list