Re: [SSSD-users] ldap_group_search_base filtering
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 10/15/2013 12:45 PM, Bright, Daniel wrote:
Well It looks like I’ve answered my own question with some trial
and error, I replaced the nss stuff that I had in ldap.conf with
this:
ldap_group_search_base =
ou=Groups,dc=some,dc=company,dc=com?sub?(|(host=\2A)(host=somehost.test.com)(host=test))
Maybe I'm parsing this wrong, but isn't this filter saying "Any record
with a host entry, or any record with one of two specific host
entries?". It looks to me like (host=somehost.test.com)(host=test) is
redundant.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.15 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlJdes8ACgkQeiVVYja6o6Pr4gCgrfClB89WEBbJsIb3p0I3YG90
cIMAn08A9wMFqu8LvhthT1O0cWGQmBUO
=Pkaj
-----END PGP SIGNATURE-----