[SSSD-users] How to specify objectClass in search_base?

Sven Geggus lists at fuchsschwanzdomain.de
Tue Jun 24 13:28:05 UTC 2014


with nslcd I do the following to simulate user private groups without
actually creating them in the directory server:

filter group (&(|(objectClass=Group)(&(!(userAccountControl:1.2.840.113556.1.4.803:=2))(objectClass=User)))(msSFU30NisDomain=example))

I tried porting this to sssd using the following:

ldap_group_search_base = DC=example,DC=com?subtree?(&(|(objectClass=Group)(&(!(userAccountControl:1.2.840.113556.1.4.803:=2))(objectClass=User)))(msSFU30NisDomain=example))

Unfortunately this does not work as expected.

Any Idea how this would be done in sssd?



"linux is evolution, not intelligent design"
(Linus Torvalds)

/me is giggls at ircnet, http://sven.gegg.us/ on the Web

More information about the sssd-users mailing list