Re: Restriction classes and ldap groups

2013-10-17 Thread Carlos R Laguna
El 17/10/13 11:21, Dominik George escribió: > Dominik George schrieb: > >>> Viktor Dukhovni schrieb: > On Thu, Oct 17, 2013 at 10:16:27AM -0400, Carlos R Laguna wrote: > LDAP is not SQL, and inverse relations (groups of user, rather > > than > users of group) are very difficult to

Re: Restriction classes and ldap groups

2013-10-17 Thread Dominik George
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Dominik George schrieb: >>> Viktor Dukhovni schrieb: >>> > On Thu, Oct 17, 2013 at 10:16:27AM -0400, Carlos R Laguna wrote: >>> > LDAP is not SQL, and inverse relations (groups of user, rather >than >>> > users of group) are very difficult to expre

Re: Restriction classes and ldap groups

2013-10-17 Thread Dominik George
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 >> Viktor Dukhovni schrieb: >> > On Thu, Oct 17, 2013 at 10:16:27AM -0400, Carlos R Laguna wrote: >> > LDAP is not SQL, and inverse relations (groups of user, rather than >> > users of group) are very difficult to express. On second thought, Viktor

Re: Restriction classes and ldap groups

2013-10-17 Thread Dominik George
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Carlos R Laguna schrieb: >Dominik George you mind to explain yourseld a little more further. If your LDAP users are regular system users, i.e., have the posixAccount class, and your mail servers uses them for local authentication, then obviously,

Re: Restriction classes and ldap groups

2013-10-17 Thread Carlos R Laguna
El 17/10/13 10:25, Dominik George escribió: > Viktor Dukhovni schrieb: > > On Thu, Oct 17, 2013 at 10:16:27AM -0400, Carlos R Laguna wrote: > > LDAP is not SQL, and inverse relations (groups of user, rather than > > users of group) are very difficult to express. > > Whereas, if the LDAP users are

Re: Restriction classes and ldap groups

2013-10-17 Thread Dominik George
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Viktor Dukhovni schrieb: >On Thu, Oct 17, 2013 at 10:16:27AM -0400, Carlos R Laguna wrote: >LDAP is not SQL, and inverse relations (groups of user, rather than >users of group) are very difficult to express. Whereas, if the LDAP users are system us

Re: Restriction classes and ldap groups

2013-10-17 Thread Viktor Dukhovni
On Thu, Oct 17, 2013 at 10:16:27AM -0400, Carlos R Laguna wrote: > Hello everyone, for a while now i have ben using ldap groups to create > restriccion classes for manage the access of my users like this > > correose_search_base = ou=Groups,dc=jovenclub,dc=cu > correose_query_filter = (&(|(cn=Cor