Re: [SSSD] [PATCHES] Use namingContext to set empty search bases

[Simo Sorce]

On Tue, 2 Nov 2010 22:39:45 +0100
Sumit Bose  wrote:
> diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml
> index 8c38ca7..2071eb4 100644
> --- a/src/man/sssd-ldap.5.xml
> +++ b/src/man/sssd-ldap.5.xml
> @@ -76,6 +76,13 @@
>                              The default base DN to use for
>                              performing LDAP user operations.
>                          </para>
>                    <para>
>                        Default: If not set the value of the
>
> namingContexts
>                        attribute from the RootDSE of the LDAP
>
> server is
>                        used. The namingContexts attribute must
>
> have a
>                        single value with the DN of the search
>
> base of the
>                        LDAP server to make this work.
>                    </para>
>                </listitem>
>            </varlistentry>
>
> @@ -1045,7 +1052,9 @@ ldap_access_filter =
> memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com </para>
>                          <para>
>                              Default: the value of
>                        <emphasis>ldap_search_base</emphasis>
>                        <emphasis>ldap_search_base</emphasis> or
>
> the value
>                        of the namingContexts attribute of the
>
> RootDSE of the
>                        LDAP server.
>                    </para>
>                </listitem>
>            </varlistentry>
>
> @@ -1059,7 +1068,9 @@ ldap_access_filter =
> memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com </para>
>                          <para>
>                              Default: the value of
>                        <emphasis>ldap_search_base</emphasis>
>                        <emphasis>ldap_search_base</emphasis> or
>
> the value
>                        of the namingContexts attribute of the
>
> RootDSE of the
>                        LDAP server.
>                    </para>
>                </listitem>
>            </varlistentry>
>
> @@ -1073,7 +1084,9 @@ ldap_access_filter =
> memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com </para>
>                          <para>
>                              Default: the value of
>                        <emphasis>ldap_search_base</emphasis>
>                        <emphasis>ldap_search_base</emphasis> or
>
> the value
>                        of the namingContexts attribute of the
>
> RootDSE of the
>                        LDAP server.
>                    </para>
>                </listitem>
>            </varlistentry>

NACK, with the change to support defaultNamingContext, these
explanations are not correct anymore.

Simo.