From 35480afaefafb77b28d35b29039989ab888aafe9 Mon Sep 17 00:00:00 2001 From: Stephen Gallagher Date: Thu, 6 May 2010 10:09:41 -0400 Subject: Add ldap_access_filter option This option (applicable to access_provider=ldap) allows the admin to set an additional LDAP search filter that must match in order for a user to be granted access to the system. Common examples for this would be limiting access to users by in a particular group, for example: ldap_access_filter = memberOf=cn=access_group,ou=Groups,dc=example,dc=com --- src/db/sysdb.c | 10 ++++++++++ 1 file changed, 10 insertions(+) (limited to 'src/db/sysdb.c') diff --git a/src/db/sysdb.c b/src/db/sysdb.c index 2d4a38d79..bfad77d8a 100644 --- a/src/db/sysdb.c +++ b/src/db/sysdb.c @@ -166,6 +166,16 @@ int sysdb_attrs_add_string(struct sysdb_attrs *attrs, return sysdb_attrs_add_val(attrs, name, &v); } +int sysdb_attrs_add_bool(struct sysdb_attrs *attrs, + const char *name, bool value) +{ + if(value) { + return sysdb_attrs_add_string(attrs, name, "TRUE"); + } + + return sysdb_attrs_add_string(attrs, name, "FALSE"); +} + int sysdb_attrs_steal_string(struct sysdb_attrs *attrs, const char *name, char *str) { -- cgit