nss-pam-ldapd commit: r1366 - nss-pam-ldapd/man

[Commits of the nss-pam-ldapd project <nss-pam-ldapd-commits [at] lists.arthurdejong.org>]

Author: arthur
Date: Sun Jan 23 21:59:42 2011
New Revision: 1366
URL: http://arthurdejong.org/viewvc/nss-pam-ldapd?view=rev&revision=1366

Log:
name pam_check_service_attr and pam_check_host_attr options in manual page and 
indicate how pam_authz_search replaces them

Modified:
   nss-pam-ldapd/man/nslcd.conf.5.xml

Modified: nss-pam-ldapd/man/nslcd.conf.5.xml
==============================================================================
--- nss-pam-ldapd/man/nslcd.conf.5.xml  Wed Jan  5 20:39:08 2011        (r1365)
+++ nss-pam-ldapd/man/nslcd.conf.5.xml  Sun Jan 23 21:59:42 2011        (r1366)
@@ -691,10 +691,14 @@
        expressions below.
       </para>
       <para>
-       For example, to check that the user has a proper authorizedService
-       value if the attribute is present:
-       <literal>(&amp;(objectClass=posixAccount)(uid=$username)
-       (|(authorizedService=$service)(!(authorizedService=*))))</literal>
+       For example, to check that the user has a proper 
<literal>authorizedService</literal>
+       value if the attribute is present (this emulates the
+       <option>pam_check_service_attr</option> option in PADL's pam_ldap):
+       
<literallayout><literal>(&amp;(objectClass=posixAccount)(uid=$username)(|(authorizedService=$service)(!(authorizedService=*))))</literal></literallayout>
+      </para>
+      <para>
+       The <option>pam_check_host_attr</option> option can be emulated with:
+       
<literallayout><literal>(&amp;(objectClass=posixAccount)(uid=$username)(|(host=$hostname)(!(host=*))))</literal></literallayout>
       </para>
       <para>
        The default behaviour is not to do this extra search and always
--
To unsubscribe send an email to
nss-pam-ldapd-commits-unsubscribe@lists.arthurdejong.org or see
http://lists.arthurdejong.org/nss-pam-ldapd-commits