lists.arthurdejong.org
RSS feed

Re: nss_schema in nslcd.conf

[Date Prev][Date Next] [Thread Prev][Thread Next]

Re: nss_schema in nslcd.conf



Hi Martin,

On Wed, 2020-07-22 at 09:57 +0200, Martin Gröger wrote:
> I'd like to use the configuration option
> nss_schema <rfc2307bis|rfc2307>
> to enable rfc2307bis.
> 
> But when I start nslcd with 'nslcd -d' I get the error message:
> nslcd: /etc/nslcd.conf:89: unknown keyword: 'nss_schema'

That option is only applicable to PADL's nss_ldap module, not nss-pam-
ldapd which mostly supports both schema's transparently out-of-the-box.

You may need to map the group/member attribute to uniqueMember if you
use a really old version of rfc2307bis. You also may need to
enable nss_nested_groups in nslcd.conf if you have groups that have
other groups as members and have the behaviour that should be
equivalent to rfc2307bis.

Hope this helps,

-- 
-- arthur - arthur@arthurdejong.org - https://arthurdejong.org/ --