[Date Prev][Date Next] [Chronological] [Thread] [Top]

RE: Search Scope ?



Change the search scope from onelevel "one" to subtree "sub"

  -- Howard Chu
  Chief Architect, Symas Corp.       Director, Highland Sun
  http://www.symas.com               http://highlandsun.com/hyc
  Symas: Premier OpenSource Development and Support 

> -----Original Message-----
> From: owner-openldap-software@OpenLDAP.org
> [mailto:owner-openldap-software@OpenLDAP.org]On Behalf Of Scilabop
 
> I am authenticating Linux(RH8) against Active Directory using Ldap.
> Everything works fine if my bind users and the domain users 
> are all in the
> same OU (Users), and the relavant part of my ldap.conf looks 
> like this:
> 
> scope sub
> 
> nss_base_passwd cn=Users,DC=test,DC=domain,DC=ca?one
> nss_base_shadow cn=Users,DC=test,DC=domain,DC=ca?one
> nss_base_group cn=Users,DC=test,DC=domain,DC=ca?one
> 
> 
> What I need to happen is have the users that reside in the OU 
> domainUsers be
> able to log in as WELL as the users in the OU Users.
> 
> so basically my thinking says that the above should look like this:
> 
> 
> nss_base_passwd DC=test,DC=domain,DC=ca?one
> nss_base_shadow DC=test,DC=domain,DC=ca?one
> nss_base_group DC=test,DC=domain,DC=ca?one
> 
> 
> but that doesn't work.
> 
> Does anyone have any ideas of how i can make it search my 
> entire Directory?
> 
> Thanks,
> 
> -darin
> 
> 
> 
> Scilab Administrator
> Faculty of Science
> The University of Victoria
> scilabop@uvic.ca
> (250) 472-4757
> 
>