On Oct 29, 2012, at 5:12 PM, Howard Chu hyc@symas.com wrote:
Dan White wrote:
...
Assuming that you will be using a PAM module on each host, the answer to that question will depend on which PAM module you choose, and what configuration it supports.
If that module supports placing a filter within the PAM configuration, then 'host=sys0*pr*' should work.
The PADL pam_ldap module has no such feature. The OpenLDAP nssov overlay does.
Assuming I got this correctly, this poses a constrain on the version of OpenLDAP that must be used. Starting from which version the nssov overlay is available?
Thanks
Simone Scremin