[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Can a ppolicy be applied to a subtree?

To: Marc Patermann <hans.moser@ofd-z.niedersachsen.de>, openldap-technical@openldap.org
Subject: Re: Can a ppolicy be applied to a subtree?
From: Howard Chu <hyc@symas.com>
Date: Fri, 16 Oct 2015 00:08:41 +0100
In-reply-to: <561F6B3A.4040701@ofd-z.niedersachsen.de>
References: <b638d56b478c44598390cd25d2faec96@PDEX13MBX06CORP.eprod.com> <561F6B3A.4040701@ofd-z.niedersachsen.de>
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0 SeaMonkey/2.38a1

Marc Patermann wrote:

Hi,

Am 14.10.2015 um 16:06 Uhr schrieb Campbell, Courtney:

I am curious if a ppolicy can be applied to a subtree so that it is
added to a user account when newly created?

Unfortunately not. I would like to have that too.
As far as I know ppolicy overlay is a database setting. See man slapo-ppolicy.
You can split your DIT to multiple database apply ppolicy to the database with
your user account subtree and glue the databases together to behave like a
single DIT again.

Currently it's not supported, but this is something that slapo-collect wouldbe appropriate for.


--
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/

References:
- Can a ppolicy be applied to a subtree?
  - From: "Campbell, Courtney" <CWCampbell@eprod.com>
- Re: Can a ppolicy be applied to a subtree?
  - From: Marc Patermann <hans.moser@ofd-z.niedersachsen.de>

Prev by Date: RE: Can a ppolicy be applied to a subtree?
Next by Date: slapd: No database support for /var/heimdal/heimdal
Index(es):
- Chronological
- Thread