Re: Limiting Search Results By Group Membership

Douglas Duckworth wrote:

If OpenLDAP can run with this schema then why wasn't support for this feature created?

There is a contrib/ overlay but I'd not use it.

What's the recommend schema?

Simply start with groupOfNames.

Ciao, Michael.

On Jul 21, 2017 1:44 PM, "Quanah Gibson-Mount" <quanah@symas.com mailto:quanah@symas.com> wrote:

--On Friday, July 21, 2017 2:24 PM -0400 Douglas Duckworth
<dod2014@med.cornell.edu <mailto:dod2014@med.cornell.edu>> wrote:


> Am I rfc2307 or rfc2307bis?  According to sssd-ldap man page:

Per nis.schema:

# Definitions from RFC2307 (Experimental)
#       An Approach for Using LDAP as a Network Information Service


so it is RFC2307 as opposed to RFC2307bis.  Neither schema has ever made it
past experimental.

--Quanah