84d7c96c17
- setup.sh: ldap_host defaults to localhost (the public sso.<domain> can't reach the 389/636 LDAP ports through NAT); overridable via CFG_LDAPS_HOST - ldap.vars access groups + ldap-client sssd filter now reference the SSO group model (site_<loc>_hosts_access, site_<loc>_host_<host>_access, god_admin) - GROUPS.md §5/§8 updated to the corrected naming - gitlink: ldap-client ebaac18 (v1.24.0)