[SSSD] [PATCH] MAN: Clarify the ldap_access_filter option further
Stephen Gallagher
sgallagh at redhat.com
Wed Feb 26 13:41:57 UTC 2014
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 02/24/2014 01:47 PM, Jakub Hrozek wrote:
> The attached patch addresses:
> https://fedorahosted.org/sssd/ticket/2235
>
> The memberof example was misleading and was making aministrators
> think that the ldap_access_filter can resolve nested group
> memberships.
>
> The alternative I was considering was changing the example to use
> a different attribute altogether, but I was struggling to come up
> with an example that wouldn't be too artificial (like
> ldap_access_filter=/bin/bash).
>
>
Ack, though I wonder if it wouldn't hurt to come up with a different
example here. Perhaps:
ldap_access_filter = (employeeType=admin)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlMN7yUACgkQeiVVYja6o6MbCgCfVdvK3ztFu6hHEC+lZRqyjAZ0
S/QAnjpO2ragyvzdW2NFGuoKaWgtK7tu
=40KT
-----END PGP SIGNATURE-----
More information about the sssd-devel
mailing list