[SSSD] [PATCH] MAN: Clarify the ldap_access_filter option further

Stephen Gallagher sgallagh at redhat.com
Wed Feb 26 13:41:57 UTC 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/24/2014 01:47 PM, Jakub Hrozek wrote:
> The attached patch addresses: 
> https://fedorahosted.org/sssd/ticket/2235
> 
> The memberof example was misleading and was making aministrators
> think that the ldap_access_filter can resolve nested group
> memberships.
> 
> The alternative I was considering was changing the example to use
> a different attribute altogether, but I was struggling to come up
> with an example that wouldn't be too artificial (like 
> ldap_access_filter=/bin/bash).
> 
> 

Ack, though I wonder if it wouldn't hurt to come up with a different
example here. Perhaps:

ldap_access_filter = (employeeType=admin)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlMN7yUACgkQeiVVYja6o6MbCgCfVdvK3ztFu6hHEC+lZRqyjAZ0
S/QAnjpO2ragyvzdW2NFGuoKaWgtK7tu
=40KT
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list