summaryrefslogtreecommitdiffstats
path: root/src/providers/ipa
diff options
context:
space:
mode:
authorSimo Sorce <ssorce@redhat.com>2010-09-16 14:04:14 -0400
committerStephen Gallagher <sgallagh@redhat.com>2010-10-18 13:12:04 -0400
commit9932622f615a783f276a83389a37e65ffcdfc5da (patch)
tree27ae5b967105d27f40948987ab4430221e3e48f4 /src/providers/ipa
parent87b8fb42e8cf76883645782273271a85dc2220aa (diff)
downloadsssd-9932622f615a783f276a83389a37e65ffcdfc5da.tar.gz
sssd-9932622f615a783f276a83389a37e65ffcdfc5da.tar.xz
sssd-9932622f615a783f276a83389a37e65ffcdfc5da.zip
Add option to limit nested groups
Diffstat (limited to 'src/providers/ipa')
-rw-r--r--src/providers/ipa/ipa_common.c3
-rw-r--r--src/providers/ipa/ipa_common.h2
2 files changed, 3 insertions, 2 deletions
diff --git a/src/providers/ipa/ipa_common.c b/src/providers/ipa/ipa_common.c
index 2acd72a6..95d99de8 100644
--- a/src/providers/ipa/ipa_common.c
+++ b/src/providers/ipa/ipa_common.c
@@ -74,7 +74,8 @@ struct dp_option ipa_def_ldap_opts[] = {
{ "ldap_dns_service_name", DP_OPT_STRING, { SSS_LDAP_SRV_NAME }, NULL_STRING },
{ "ldap_krb5_ticket_lifetime", DP_OPT_NUMBER, { .number = (24 * 60 * 60) }, NULL_NUMBER },
{ "ldap_access_filter", DP_OPT_STRING, NULL_STRING, NULL_STRING },
- { "ldap_netgroup_search_base", DP_OPT_STRING, NULL_STRING, NULL_STRING }
+ { "ldap_netgroup_search_base", DP_OPT_STRING, NULL_STRING, NULL_STRING },
+ { "ldap_group_nesting_level", DP_OPT_NUMBER, { .number = 2 }, NULL_NUMBER }
};
struct sdap_attr_map ipa_attr_map[] = {
diff --git a/src/providers/ipa/ipa_common.h b/src/providers/ipa/ipa_common.h
index 144ebf0c..8cbcaebb 100644
--- a/src/providers/ipa/ipa_common.h
+++ b/src/providers/ipa/ipa_common.h
@@ -35,7 +35,7 @@ struct ipa_service {
/* the following defines are used to keep track of the options in the ldap
* module, so that if they change and ipa is not updated correspondingly
* this will trigger a runtime abort error */
-#define IPA_OPTS_BASIC_TEST 37
+#define IPA_OPTS_BASIC_TEST 38
/* the following define is used to keep track of the options in the krb5
* module, so that if they change and ipa is not updated correspondingly