diff options
| author | Stephen Gallagher <sgallagh@redhat.com> | 2010-05-06 10:09:41 -0400 |
|---|---|---|
| committer | Stephen Gallagher <sgallagh@redhat.com> | 2010-05-27 14:44:14 -0400 |
| commit | 35480afaefafb77b28d35b29039989ab888aafe9 (patch) | |
| tree | 60789844987297b64c9dc237bdd4501e4b5df86f /src/providers/ldap/ldap_common.h | |
| parent | 8bb6aa3fd81a3c195b92270ddf189296abae65eb (diff) | |
| download | sssd-35480afaefafb77b28d35b29039989ab888aafe9.tar.gz sssd-35480afaefafb77b28d35b29039989ab888aafe9.tar.xz sssd-35480afaefafb77b28d35b29039989ab888aafe9.zip | |
Add ldap_access_filter option
This option (applicable to access_provider=ldap) allows the admin
to set an additional LDAP search filter that must match in order
for a user to be granted access to the system.
Common examples for this would be limiting access to users by in a
particular group, for example:
ldap_access_filter = memberOf=cn=access_group,ou=Groups,dc=example,dc=com
Diffstat (limited to 'src/providers/ldap/ldap_common.h')
| -rw-r--r-- | src/providers/ldap/ldap_common.h | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/src/providers/ldap/ldap_common.h b/src/providers/ldap/ldap_common.h index 53ffd6fe8..1ee7378cb 100644 --- a/src/providers/ldap/ldap_common.h +++ b/src/providers/ldap/ldap_common.h @@ -73,6 +73,9 @@ void sdap_pam_auth_handler(struct be_req *breq); /* chpass */ void sdap_pam_chpass_handler(struct be_req *breq); +/* access */ +void sdap_pam_access_handler(struct be_req *breq); + void sdap_handler_done(struct be_req *req, int dp_err, |