[Date Prev][Date Next]
Re: dynlist and group membership (libnss-ldap, posixGroup, samba)
Felipe Augusto van de Wiel <email@example.com> writes:
> Thanks for replying. :-)
> On 20-05-2010 12:07, Dieter Kluenter wrote:
>> Felipe Augusto van de Wiel <firstname.lastname@example.org> writes:
>>> The problem, is that I would expect and
>>> 'id userA' to include group 'active-samba-users'
>>> but it doesn't. But 'getent group active-samba-users'
>>> includes all the users:
>> modify the dynlist overlay configuration and rewrite the
>> labeledURI attribute value in order to match your
> Well, that's kind of the problem, as I understood
> it, everything is just fine, the dynlist is working and
> adding the member fields as expected, the 'getent group'
> return the users equivalent to "dyngroup" and respective
> filter, but 'id' and the rest of the system, for some that
> reason that I'm obviously missing, doesn't seem the users
> as part of the group, although the group list the user in
> it. :-(
I see, so this is more a nss and pam problem than a openldap
issue. You may try the nssov overlay, see man slapo-nssov(5), although
I have no vital experience with this overlay.
Dieter Klünter | Systemberatung
GPG Key ID:8EF7B6C6