Re: schema for NSS LDAP with not all accounts active

2001-03-30 Thread Jeremy Lunn
On Fri, Mar 30, 2001 at 11:54:37PM +0300, Sami Haahtinen wrote: > i'm currently implementing filter attribute for pam_ldap, which would allow > you > to add a custom filter for your pam module (filter=(service=telnet) would be > quite effective.. Nice. I was going to implement LDAP for someone b

Re: schema for NSS LDAP with not all accounts active

2001-03-30 Thread Jeremy Lunn
On Fri, Mar 30, 2001 at 11:54:37PM +0300, Sami Haahtinen wrote: > i'm currently implementing filter attribute for pam_ldap, which would allow you > to add a custom filter for your pam module (filter=(service=telnet) would be > quite effective.. Nice. I was going to implement LDAP for someone but

Re: schema for NSS LDAP with not all accounts active

2001-03-30 Thread Sami Haahtinen
On Fri, Mar 30, 2001 at 08:47:18PM +0200, Piotr Roszatycki wrote: > > Well, at least that's an solution. However I don't like it too much, to > > have a whole bunch of config files lying around. If I find the time > > (imagine the if written in real big letters), I will try to implement this > > in

Re: schema for NSS LDAP with not all accounts active

2001-03-30 Thread Piotr Roszatycki
On Fri, 30 Mar 2001, Alexander Reelsen wrote: > Well, at least that's an solution. However I don't like it too much, to > have a whole bunch of config files lying around. If I find the time > (imagine the if written in real big letters), I will try to implement this > in pam_ldap, where it belongs

Re: schema for NSS LDAP with not all accounts active

2001-03-30 Thread Sami Haahtinen
On Fri, Mar 30, 2001 at 08:47:18PM +0200, Piotr Roszatycki wrote: > > Well, at least that's an solution. However I don't like it too much, to > > have a whole bunch of config files lying around. If I find the time > > (imagine the if written in real big letters), I will try to implement this > > i

Re: schema for NSS LDAP with not all accounts active

2001-03-30 Thread Piotr Roszatycki
On Fri, 30 Mar 2001, Alexander Reelsen wrote: > Well, at least that's an solution. However I don't like it too much, to > have a whole bunch of config files lying around. If I find the time > (imagine the if written in real big letters), I will try to implement this > in pam_ldap, where it belongs

Re: schema for NSS LDAP with not all accounts active

2001-03-30 Thread Alexander Reelsen
Hi On Fri, Mar 30, 2001 at 10:15:24AM +1000, Russell Coker wrote: > On Friday 30 March 2001 08:55, Russell Coker wrote: > > Good point. The problem is that the NSS interface doesn't allow for such > > things so you would have to use pam_ldap for all authentication (no big > > deal just a minor PI

Re: schema for NSS LDAP with not all accounts active

2001-03-30 Thread Alexander Reelsen
Hi On Fri, Mar 30, 2001 at 10:15:24AM +1000, Russell Coker wrote: > On Friday 30 March 2001 08:55, Russell Coker wrote: > > Good point. The problem is that the NSS interface doesn't allow for such > > things so you would have to use pam_ldap for all authentication (no big > > deal just a minor P