[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: dynlist, memberof,and authentication



Michael Ströder wrote:
Richard Pijnenburg wrote:
I've created a group with the dynlist overlay to create dynamic groups.
Now i want to implement authentication with it but seem to be unable to search
on it with nss-pam-lib or sssd.

You cannot search members of dynamic groups.

Therefore I wrote a script which maintains static groups by LDAP searches
specified by LDAP URLs.

If you're going to store the results in static groups anyway, just use the autogroup overlay.

--
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/