nslcd feature request (combined pam_authz_search)

[Date Prev][Date Next] [Thread Prev][Thread Next]

From: Lior Goikhburg <l.goikhburg [at] bonsport.ru>
To: nss-pam-ldapd-users [at] lists.arthurdejong.org
Subject: nslcd feature request (combined pam_authz_search)
Date: Mon, 23 Apr 2012 21:53:00 +0400

Hello,

Here is a situation: I need to perform two different searches before authenticating a user:
* a user object should have a attribute "host" set to the $hostname of the machine
* a host object of $hostname shoud have an attribute "mode" set to "active"

It would be possible if I could specify more than one pam_authz_search parameter in nslcd.conf file.

A possible config block could look like this:

pam_authz_search (&(objectClass=posixAccount)(uid=$username)(|(host=$host)(host=$fqdn)))
pam_authz_search (&(objectClass=server)(mode=active))
satisfy any

Any thoughts ?

-- 
To unsubscribe send an email to
nss-pam-ldapd-users-unsubscribe@lists.arthurdejong.org or see
http://lists.arthurdejong.org/nss-pam-ldapd-users/

nslcd feature request (combined pam_authz_search), Lior Goikhburg

Re: nslcd feature request (combined pam_authz_search), Arthur de Jong
- Re: nslcd feature request (combined pam_authz_search), Lior Goikhburg
  - Re: nslcd feature request (combined pam_authz_search), Arthur de Jong

Prev by Date: Re: [PATCH] increase filter_buffer size in try_autzsearch
Next by Date: Re: nslcd feature request (combined pam_authz_search)
Previous by thread: Re: libnss-ldapd on Debian squeeze, authentication ok, but hosts resolution is wrong
Next by thread: Re: nslcd feature request (combined pam_authz_search)