718itbiz/ldap-client
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Better groups

Browse Source
This commit is contained in:
William Mantly
2026-07-10 18:57:50 -04:00
parent be5105ba1b
commit ad787a6bf8
6 changed files with 19 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
files/sssd.conf.mo
+2 -2
View File
@@ -21,12 +21,12 @@ ldap_sudo_search_base = {{ldap_base_dn}}
# Filter for sudo access: global host_admin OR host-specific admin
ldap_sudo_full_refresh_interval = 900
ldap_sudo_smart_refresh_interval = 300
ldap_sudo_search_filter = (|(memberOf=cn=host_admin,ou=groups,dc=theta42,dc=com)(memberOf=cn=host_{hostname}_admin,ou=groups,dc=theta42,dc=com))
ldap_sudo_search_filter = (|(memberOf=cn={{location}}host_admin,ou=groups,dc=theta42,dc=com)(memberOf=cn={{location}}host_{hostname}_admin,ou=groups,dc=theta42,dc=com))
# Access control: only allow users in host_access or host_{hostname}_access
access_provider = ldap
ldap_access_order = filter
ldap_access_filter = (|(memberof=cn=host_access,ou=groups,{{ldap_base_dn}})(memberof=cn=host_{{current_host}}_access,ou=groups,{{ldap_base_dn}}))
ldap_access_filter = (|(memberof=cn={{location}}host_access,ou=groups,{{ldap_base_dn}})(memberof=cn={{location}}host_{{current_host}}_access,ou=groups,{{ldap_base_dn}}))
# Mapping
ldap_user_search_base = ou=people,{{ldap_base_dn}}