<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=utf-8">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7654.12">
<TITLE>Re: [SSSD] Group results.</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/plain format -->
<P><FONT SIZE=2>> Do they appear if you search using the filter:<BR>
> "(&(objectclass=User)(cn=a000569))"<BR>
Yes.<BR>
<BR>
> Since that's what you specified for ldap_user_object_class.<BR>
Yes, well the user is of that objectClass,<BR>
----<BR>
objectClass: top<BR>
objectClass: person<BR>
objectClass: organizationalPerson<BR>
objectClass: user<BR>
----<BR>
<BR>
> If it doesn't have this objectClass (or it's not readable by anonymous<BR>
> or the bind DN you may have specified) then we will ignore it on a<BR>
search<BR>
Ok, understood.<BR>
<BR>
/Patrik<BR>
<BR>
<BR>
On Fri, 2010-12-10 at 14:14 -0500, Stephen Gallagher wrote:<BR>
> -----BEGIN PGP SIGNED MESSAGE-----<BR>
> Hash: SHA1<BR>
><BR>
> On 12/10/2010 02:07 PM, Martinsson Patrik wrote:<BR>
> >> Do the members a000569, a000680 and a000590 exist in the directory<BR>
> >> server if you look them up directly?<BR>
> ><BR>
> > If you mean like 'id a000569/a000680/a000590', then yes, if I remembered<BR>
> > it correctly, I turned off my workcomputer so I cant comfirm it since<BR>
> > I'm home now.<BR>
> ><BR>
> > If you mean like 'ldapsearch 'ou=People,dc=xx,dc=xx,dc=xx'<BR>
> > "(&(objectclass=*)(cn=a000569))"', then yes (for all those users).<BR>
> ><BR>
><BR>
> Do they appear if you search using the filter:<BR>
> "(&(objectclass=User)(cn=a000569))"<BR>
><BR>
> Since that's what you specified for ldap_user_object_class.<BR>
><BR>
> If it doesn't have this objectClass (or it's not readable by anonymous<BR>
> or the bind DN you may have specified) then we will ignore it on a search.<BR>
><BR>
> - --<BR>
> Stephen Gallagher<BR>
> RHCE 804006346421761<BR>
><BR>
> Delivering value year after year.<BR>
> Red Hat ranks #1 in value among software vendors.<BR>
> <A HREF="http://www.redhat.com/promo/vendor/">http://www.redhat.com/promo/vendor/</A><BR>
> -----BEGIN PGP SIGNATURE-----<BR>
> Version: GnuPG v1.4.11 (GNU/Linux)<BR>
> Comment: Using GnuPG with Fedora - <A HREF="http://enigmail.mozdev.org/">http://enigmail.mozdev.org/</A><BR>
><BR>
> iEYEARECAAYFAk0Ce/oACgkQeiVVYja6o6NrFgCgggku9GxbMlWbYGiBUo1RMFXX<BR>
> xTAAn1ff6p6RyaCHY6Ihprj/+YAtxMKq<BR>
> =ujFY<BR>
> -----END PGP SIGNATURE-----<BR>
> _______________________________________________<BR>
> sssd-devel mailing list<BR>
> sssd-devel@lists.fedorahosted.org<BR>
> <A HREF="https://fedorahosted.org/mailman/listinfo/sssd-devel">https://fedorahosted.org/mailman/listinfo/sssd-devel</A><BR>
<BR>
</FONT>
</P>
</BODY>
</HTML>