diff options
author | Simo Sorce <ssorce@redhat.com> | 2010-09-16 14:04:14 -0400 |
---|---|---|
committer | Stephen Gallagher <sgallagh@redhat.com> | 2010-10-18 13:12:04 -0400 |
commit | 9932622f615a783f276a83389a37e65ffcdfc5da (patch) | |
tree | 27ae5b967105d27f40948987ab4430221e3e48f4 /src/providers/ipa | |
parent | 87b8fb42e8cf76883645782273271a85dc2220aa (diff) | |
download | sssd-9932622f615a783f276a83389a37e65ffcdfc5da.tar.gz sssd-9932622f615a783f276a83389a37e65ffcdfc5da.tar.xz sssd-9932622f615a783f276a83389a37e65ffcdfc5da.zip |
Add option to limit nested groups
Diffstat (limited to 'src/providers/ipa')
-rw-r--r-- | src/providers/ipa/ipa_common.c | 3 | ||||
-rw-r--r-- | src/providers/ipa/ipa_common.h | 2 |
2 files changed, 3 insertions, 2 deletions
diff --git a/src/providers/ipa/ipa_common.c b/src/providers/ipa/ipa_common.c index 2acd72a6..95d99de8 100644 --- a/src/providers/ipa/ipa_common.c +++ b/src/providers/ipa/ipa_common.c @@ -74,7 +74,8 @@ struct dp_option ipa_def_ldap_opts[] = { { "ldap_dns_service_name", DP_OPT_STRING, { SSS_LDAP_SRV_NAME }, NULL_STRING }, { "ldap_krb5_ticket_lifetime", DP_OPT_NUMBER, { .number = (24 * 60 * 60) }, NULL_NUMBER }, { "ldap_access_filter", DP_OPT_STRING, NULL_STRING, NULL_STRING }, - { "ldap_netgroup_search_base", DP_OPT_STRING, NULL_STRING, NULL_STRING } + { "ldap_netgroup_search_base", DP_OPT_STRING, NULL_STRING, NULL_STRING }, + { "ldap_group_nesting_level", DP_OPT_NUMBER, { .number = 2 }, NULL_NUMBER } }; struct sdap_attr_map ipa_attr_map[] = { diff --git a/src/providers/ipa/ipa_common.h b/src/providers/ipa/ipa_common.h index 144ebf0c..8cbcaebb 100644 --- a/src/providers/ipa/ipa_common.h +++ b/src/providers/ipa/ipa_common.h @@ -35,7 +35,7 @@ struct ipa_service { /* the following defines are used to keep track of the options in the ldap * module, so that if they change and ipa is not updated correspondingly * this will trigger a runtime abort error */ -#define IPA_OPTS_BASIC_TEST 37 +#define IPA_OPTS_BASIC_TEST 38 /* the following define is used to keep track of the options in the krb5 * module, so that if they change and ipa is not updated correspondingly |