[SSSD-users] (objectClass=ipService)

Dmitri Pal dpal at redhat.com
Fri May 9 11:59:25 UTC 2014

On 05/09/2014 07:32 AM, Michael Ströder wrote:
> HI!
> How does sssd decide whether to send searches with filter
> (objectClass=ipService) or not?

 From sssd-ldap man page:

            ldap_service_object_class (string)
                The object class of a service entry in LDAP.

                Default: ipService

            ldap_service_name (string)
                The LDAP attribute that contains the name of service 
attributes and their aliases.

                Default: cn

            ldap_service_port (string)
                The LDAP attribute that contains the port managed by 
this service.

                Default: ipServicePort

            ldap_service_proto (string)
                The LDAP attribute that contains the protocols 
understood by this service.

                Default: ipServiceProtocol

            ldap_service_search_base (string)
                An optional base DN, search scope and LDAP filter to 
restrict LDAP searches for this
                attribute type.



                The scope can be one of "base", "onelevel" or "subtree". 
The filter must be a valid LDAP
                search filter as specified by 

                For examples of this syntax, please refer to the 
“ldap_search_base” examples section.

                Default: the value of ldap_search_base

                Please note that specifying scope or filter is not 
supported for searches against an
                Active Directory Server that might yield a large number 
of results and trigger the Range
                Retrieval extension in the response.

> Does it depend on "services: sss" set in /etc/nsswitch.conf?


Also see ticket: https://fedorahosted.org/sssd/ticket/929
> Ciao, Michael.
> _______________________________________________
> sssd-users mailing list
> sssd-users at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users

Thank you,
Dmitri Pal

Sr. Engineering Manager IdM portfolio
Red Hat, Inc.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-users/attachments/20140509/fc4aa7f3/attachment.html>

More information about the sssd-users mailing list