summaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorIonuț Arțăriși <iartarisi@suse.cz>2013-02-11 17:15:23 +0100
committerIonuț Arțăriși <iartarisi@suse.cz>2013-02-18 17:02:44 +0100
commit159ffe48e986e524f5930ad41d376bdce2b6a07e (patch)
treeeddb5a177f2b29265b687087a2411608a832737e /etc
parent63f6e87c5e267a015f4d6054c0941c0efc8526f1 (diff)
downloadkeystone-159ffe48e986e524f5930ad41d376bdce2b6a07e.tar.gz
keystone-159ffe48e986e524f5930ad41d376bdce2b6a07e.tar.xz
keystone-159ffe48e986e524f5930ad41d376bdce2b6a07e.zip
make LDAP query scope configurable
Get the DN from the LDAP server itself rather than hardcoding its format. Fixes bug 1122181 Change-Id: I6f70c480b5c6f1b064e74d3cbd2cd8ca5ee82b0a
Diffstat (limited to 'etc')
-rw-r--r--etc/keystone.conf.sample4
1 files changed, 4 insertions, 0 deletions
diff --git a/etc/keystone.conf.sample b/etc/keystone.conf.sample
index 8eddfe1a..b954946b 100644
--- a/etc/keystone.conf.sample
+++ b/etc/keystone.conf.sample
@@ -130,6 +130,10 @@
# allow_subtree_delete = False
# dumb_member = cn=dumb,dc=example,dc=com
+# The LDAP scope for queries, this can be either 'one'
+# (onelevel/singleLevel) or 'sub' (subtree/wholeSubtree)
+# query_scope = one
+
# user_tree_dn = ou=Users,dc=example,dc=com
# user_filter =
# user_objectclass = inetOrgPerson