Re: Limiting Search Results By Group Membership

Thank you both for your guidance.

I will try this now.

Doug

Thanks,

Douglas Duckworth, MSc, LFCS HPC System Administrator Scientific Computing Unit Physiology and Biophysics Weill Cornell Medicine E: doug@med.cornell.edu O: 212-746-6305 F: 212-746-8690

On Mon, Jul 24, 2017 at 10:31 AM, Michael Ströder michael@stroeder.com wrote:

Douglas Duckworth wrote:

...

If OpenLDAP can run with this schema then why wasn't support for this

feature created?

There is a contrib/ overlay but I'd not use it.

...

What's the recommend schema?

Simply start with groupOfNames.

Ciao, Michael.

...

On Jul 21, 2017 1:44 PM, "Quanah Gibson-Mount" <quanah@symas.com mailto:quanah@symas.com> wrote:

--On Friday, July 21, 2017 2:24 PM -0400 Douglas Duckworth
<dod2014@med.cornell.edu <mailto:dod2014@med.cornell.edu>> wrote:


> Am I rfc2307 or rfc2307bis?  According to sssd-ldap man page:

Per nis.schema:

# Definitions from RFC2307 (Experimental)
#       An Approach for Using LDAP as a Network Information Service


so it is RFC2307 as opposed to RFC2307bis.  Neither schema has ever

made it

...

past experimental.

--Quanah