提交 8feb91bb 编写于 作者: K Kevin Connor 提交者: Kohsuke Kawaguchi

change ldap group lookup when using memberUid to match using name

according to rfc2307 which says the memberUid is a name (not a uid
strangely enough)

just going by
http://manpages.ubuntu.com/manpages/natty/man5/sssd-ldap.5.html
ldap_schema description and my broken install on ubuntu...

I can't say what ldif I used except it was standard (I didn't write it)
and ldapscripts and phpmyadmin all seem to want the field to be a name.
上级 d95e6445
......@@ -64,7 +64,7 @@ bindAuthenticator(BindAuthenticator2,initialDirContextFactory) {
authoritiesPopulator(AuthoritiesPopulatorImpl, initialDirContextFactory, instance.groupSearchBase) {
// see DefaultLdapAuthoritiesPopulator for other possible configurations
searchSubtree = true;
groupSearchFilter = "(| (member={0}) (uniqueMember={0}) (memberUid={1}))";
groupSearchFilter = "(| (member={0}) (uniqueMember={0}) (memberUid={0}))";
}
authenticationManager(ProviderManager) {
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册