[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: identity assertion

On Sat, 21 Jan 2006, Pierangelo Masarati wrote:

>authorization and SASL are orthogonal.  Without mucking with SASL, you
>can use:
>ldapsearch -x -W -D cn=authorizeduser,dc=test \
>        -e '!authzid=dn:cn=config,dc=test'
>this causes the tool to use the proxyAuthz control on that operation
>(the '!' is because the control MUST be critical).

Ah!  That's exactly what I've been looking for.

I suppose if I had just checked the ldapsearch command-line help I would
have seen that but I had been relying on the man page.

Thanks so much!

Eric Irrgang - UT Austin ITS Unix Systems - (512)475-9342