[SSSD-users] ldap_group_search_base filtering

Stephen Gallagher sgallagh at redhat.com
Tue Oct 15 17:26:40 UTC 2013


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/15/2013 12:45 PM, Bright, Daniel wrote:
> Well It looks like I’ve answered my own question with some trial
> and error, I replaced the nss stuff that I had in ldap.conf with
> this:
> 
> 
> 
> ldap_group_search_base = 
> ou=Groups,dc=some,dc=company,dc=com?sub?(|(host=\2A)(host=somehost.test.com)(host=test))
>
> 
> 

Maybe I'm parsing this wrong, but isn't this filter saying "Any record
with a host entry, or any record with one of two specific host
entries?". It looks to me like (host=somehost.test.com)(host=test) is
redundant.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.15 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlJdes8ACgkQeiVVYja6o6Pr4gCgrfClB89WEBbJsIb3p0I3YG90
cIMAn08A9wMFqu8LvhthT1O0cWGQmBUO
=Pkaj
-----END PGP SIGNATURE-----


More information about the sssd-users mailing list