lists.arthurdejong.org
RSS feed

support for ldap_compare

[Date Prev][Date Next] [Thread Prev][Thread Next]

support for ldap_compare



Hi,

Are there any plans to add ldap_comapre?, could be used to implement
pam_authz_compare.

A little background:
We are using openldap with dynlist today for controlling access to
hosts and that works with libpam-ldap and pam_groupdn because that one
uses ldap_compare and not ldap_search as pam_authz_search do.
Dynamic attributes are not visiable during search, they are added
after all filtering is done.
WIth pam_authz_search the filter I tested with looked like this
(&(objectClass=groupOfURLs)(cn=server1)(uniqueMember=$dn))
where uniqueMember is the dynamic attr.

//Stefan
-- 
To unsubscribe send an email to
nss-pam-ldapd-users-unsubscribe@lists.arthurdejong.org or see
http://lists.arthurdejong.org/nss-pam-ldapd-users