From 0d12b0344fc8ee05211e65ecf332a46afc542765 Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Wed, 14 Jul 2010 14:36:42 -0400 Subject: Fix nis netgroup configuration This was originally configured to pull from the compat area but Nalin thinks that is a bad idea (and it stopped working anyway). This configures the netgroup map to create the triples on its own. Ticket #87 --- install/share/nis.uldif | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/install/share/nis.uldif b/install/share/nis.uldif index 86f521b61..5860d23af 100644 --- a/install/share/nis.uldif +++ b/install/share/nis.uldif @@ -65,12 +65,22 @@ default:nis-map: netid.byname default:nis-base: cn=users, cn=accounts, $SUFFIX default:nis-secure: no +# Note that the escapes in this entry can be quite confusing. The trick +# is that each level of nesting requires (2^n) - 1 escapes. So the +# first level is \", the second is \\\", the third is \\\\\\\", etc. +# (1, 3, 7, 15, more than that and you'll go insane) + +# Note that this configuration mirrors the Schema Compat configuration for +# triples. dn: nis-domain=$DOMAIN+nis-map=netgroup, cn=NIS Server, cn=plugins, cn=config default:objectclass: top default:objectclass: extensibleObject default:nis-domain: $DOMAIN default:nis-map: netgroup -default:nis-base: cn=ng, cn=compat, $SUFFIX +default:nis-base: cn=ng, cn=alt, $SUFFIX +default:nis-filter: (objectClass=ipanisNetgroup) +default:nis-key-format: %{cn} +default:nis-value-format: %merge(" ","%{memberNisNetgroup}","(%link(\"%collect(\\\"%{externalHost}\\\",\\\"%deref(\\\\\\\"memberHost\\\\\\\",\\\\\\\"fqdn\\\\\\\")\\\",\\\"%deref_r(\\\\\\\"member\\\\\\\",\\\\\\\"fqdn\\\\\\\")\\\",\\\"%deref_r(\\\\\\\"memberHost\\\\\\\",\\\\\\\"member\\\\\\\",\\\\\\\"fqdn\\\\\\\")\\\")\",\"-\",\",\",\"%collect(\\\"%deref(\\\\\\\"memberUser\\\\\\\",\\\\\\\"uid\\\\\\\")\\\",\\\"%deref_r(\\\\\\\"member\\\\\\\",\\\\\\\"uid\\\\\\\")\\\",\\\"%deref_r(\\\\\\\"memberUser\\\\\\\",\\\\\\\"member\\\\\\\",\\\\\\\"uid\\\\\\\")\\\")\",\"-\"),%{nisDomainName:-})") default:nis-secure: no dn: cn=ng,cn=Schema Compatibility,cn=plugins,cn=config -- cgit