diff options
| author | Stephen Gallagher <sgallagh@redhat.com> | 2010-05-06 10:09:41 -0400 |
|---|---|---|
| committer | Stephen Gallagher <sgallagh@redhat.com> | 2010-05-16 13:28:44 -0400 |
| commit | b47587be50d5e5b94b961c4d08672906126cd974 (patch) | |
| tree | ac69591aebd8865b34da144dc7ac8babeb702db6 | |
| parent | bc45212faf209b10d2d6eb57e056a5e6f04b0876 (diff) | |
| download | sssd_unused-b47587be50d5e5b94b961c4d08672906126cd974.tar.gz sssd_unused-b47587be50d5e5b94b961c4d08672906126cd974.tar.xz sssd_unused-b47587be50d5e5b94b961c4d08672906126cd974.zip | |
Add ldap_access_filter option
This option (applicable to access_provider=ldap) allows the admin
to set an additional LDAP search filter that must match in order
for a user to be granted access to the system.
Common examples for this would be limiting access to users by in a
particular group, for example:
ldap_access_filter = memberOf=cn=access_group,ou=Groups,dc=example,dc=com
| -rw-r--r-- | src/providers/ipa/ipa_common.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/providers/ipa/ipa_common.h b/src/providers/ipa/ipa_common.h index 9678e0ce..fe9ca541 100644 --- a/src/providers/ipa/ipa_common.h +++ b/src/providers/ipa/ipa_common.h @@ -35,7 +35,7 @@ struct ipa_service { /* the following defines are used to keep track of the options in the ldap * module, so that if they change and ipa is not updated correspondingly * this will trigger a runtime abort error */ -#define IPA_OPTS_BASIC_TEST 34 +#define IPA_OPTS_BASIC_TEST 35 /* the following define is used to keep track of the options in the krb5 * module, so that if they change and ipa is not updated correspondingly |