diff options
| author | Pavel Reichl <preichl@redhat.com> | 2014-05-21 09:30:13 +0100 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2014-06-02 15:24:53 +0200 |
| commit | 69994add9cd4e57d40b3b7a0b1783ef2d0aa974c (patch) | |
| tree | e45d0d5055bfcb47cbff9a3717bcb803c613380a /src/providers/ad | |
| parent | c30f1d05d6c75080fbe8ea9868f291e7a331ad44 (diff) | |
| download | sssd-69994add9cd4e57d40b3b7a0b1783ef2d0aa974c.tar.gz sssd-69994add9cd4e57d40b3b7a0b1783ef2d0aa974c.tar.xz sssd-69994add9cd4e57d40b3b7a0b1783ef2d0aa974c.zip | |
SDAP: Add option to disable use of Token-Groups
Disabling use of Token-Groups is mandatory if expansion of nested groups is not
desired (ldap_group_nesting_level = 0) for AD provider.
Resolves:
https://fedorahosted.org/sssd/ticket/2294
Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
Diffstat (limited to 'src/providers/ad')
| -rw-r--r-- | src/providers/ad/ad_opts.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/providers/ad/ad_opts.h b/src/providers/ad/ad_opts.h index e793e2b1e..8f6ce7e1e 100644 --- a/src/providers/ad/ad_opts.h +++ b/src/providers/ad/ad_opts.h @@ -127,6 +127,7 @@ struct dp_option ad_def_ldap_opts[] = { { "ldap_idmap_default_domain_sid", DP_OPT_STRING, NULL_STRING, NULL_STRING }, { "ldap_groups_use_matching_rule_in_chain", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE }, { "ldap_initgroups_use_matching_rule_in_chain", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE }, + { "ldap_use_tokengroups", DP_OPT_BOOL, BOOL_TRUE, BOOL_TRUE}, { "ldap_rfc2307_fallback_to_local_users", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE }, { "ldap_disable_range_retrieval", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE }, { "ldap_min_id", DP_OPT_NUMBER, NULL_NUMBER, NULL_NUMBER}, |