Re: nss_ldap and multiple group memberships

2010-02-25 Thread Gerrit Kühn
On Thu, 25 Feb 2010 15:10:03 +1100 "Scott, Brian" wrote about RE: nss_ldap and multiple group memberships: SB> It looks like you may need to uncomment the line '#nss_map_attribute SB> uniqueMember member' in your ldap.conf to then use the correct SB> attribute n

Re: nss_ldap and multiple group memberships

2010-02-25 Thread Gerrit Kühn
On Thu, 25 Feb 2010 11:17:32 +1100 "Scott, Brian" wrote about RE: nss_ldap and multiple group memberships: SB> It depends on the type of group. There are at least two types of group SB> objects that you can use in LDAP but only one of them works. You need SB> to use posixGro

RE: nss_ldap and multiple group memberships

2010-02-24 Thread Scott, Brian
AM To: Gerrit Kühn; freebsd-stable@freebsd.org Subject: RE: nss_ldap and multiple group memberships It depends on the type of group. There are at least two types of group objects that you can use in LDAP but only one of them works. You need to use posixGroup objects for unix groups. As I remember

Re: nss_ldap and multiple group memberships

2010-02-24 Thread Peter C. Lai
Wow this is a really well written explanation. On 2010-02-25 11:17:32AM +1100, Scott, Brian wrote: > It depends on the type of group. There are at least two types of group > objects that you can use in LDAP but only one of them works. You need to use > posixGroup objects for unix groups. As I re

RE: nss_ldap and multiple group memberships

2010-02-24 Thread Scott, Brian
It depends on the type of group. There are at least two types of group objects that you can use in LDAP but only one of them works. You need to use posixGroup objects for unix groups. As I remember it, these have memberUid attributes for the member ids. These are simple unix identifiers. groupOf

Re: nss_ldap and multiple group memberships

2010-02-24 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 24/02/2010 10:39, Patrick M. Hausen wrote: > I do not remember where that '?one' came from and what precisely > it does. Voodoo I copied from some obscure "Howto", I figure. > I'd appreciate some feedback on that part ;-) It sets the scope of the L

Re: nss_ldap and multiple group memberships

2010-02-24 Thread Patrick M. Hausen
Hi, all, On Wed, Feb 24, 2010 at 11:23:11AM +0100, Gerrit Kühn wrote: > Is anyone here using nss_ldap and can successfully get it to work with > multiple group memberships? I would really like to get this to work here, > but I only get the primary group: > > penumbra# id gekueh > uid=1030(gekueh)