[PATCH] store additional LDAP attributes

[Sumit Bose]

Hi,

with this patch the LDAP backend can store two additional attributes to
the sysdb if available. The original DN is used by the authentication
part of the LDAP backend to bind to the LDAP server. The user principle
name (UPN) can be used by the kerberos backend to get the TGT. Both are
necessary if the DN or UPN cannot be generated from the unix user name,
which is often the case if you are using AD.

bye,
Sumit

[Stephen Gallagher]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/20/2009 08:15 AM, Sumit Bose wrote:
>  Hi,
>  
>  with this patch the LDAP backend can store two additional attributes to
>  the sysdb if available. The original DN is used by the authentication
>  part of the LDAP backend to bind to the LDAP server. The user principle
>  name (UPN) can be used by the kerberos backend to get the TGT. Both are
>  necessary if the DN or UPN cannot be generated from the unix user name,
>  which is often the case if you are using AD.
>  
>  bye,
>  Sumit
>  
>  
>  ------------------------------------------------------------------------
>  
>  _______________________________________________
>  sssd-devel mailing list
>  sssd-devel(a)lists.fedorahosted.org
>  https://fedorahosted.org/mailman/listinfo/sssd-devel 
Ack.

Please add new sysdb tests for the sysdb_store_user_with_attrs_send()
function sometime soon.

- -- 
Stephen Gallagher
RHCE 804006346421761

Looking to carve out IT costs?
www.redhat.com/carveoutcosts/
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
>
> iEUEARECAAYFAkqOzY0ACgkQeiVVYja6o6NjRACWJaJMna+b9zULZq70XQauDLcF
> TQCeK9F2Wi4cs4R78CsBY2g8JIKmPk4=
> =fGuI
> -----END PGP SIGNATURE-----

[Stephen Gallagher]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/21/2009 12:38 PM, Stephen Gallagher wrote:
>  On 08/20/2009 08:15 AM, Sumit Bose wrote:
> > Hi,
>  
> > with this patch the LDAP backend can store two additional attributes to
> > the sysdb if available. The original DN is used by the authentication
> > part of the LDAP backend to bind to the LDAP server. The user principle
> > name (UPN) can be used by the kerberos backend to get the TGT. Both are
> > necessary if the DN or UPN cannot be generated from the unix user name,
> > which is often the case if you are using AD.
>  
> > bye,
> > Sumit
>  
>  
> > ------------------------------------------------------------------------
>  
> > _______________________________________________
> > sssd-devel mailing list
> > sssd-devel(a)lists.fedorahosted.org
> > https://fedorahosted.org/mailman/listinfo/sssd-devel
>  
>  Ack.
>  
>  Please add new sysdb tests for the sysdb_store_user_with_attrs_send()
>  function sometime soon.
>   
Pushed to master.
_______________________________________________
sssd-devel mailing list
sssd-devel(a)lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/sssd-devel

- -- 
Stephen Gallagher
RHCE 804006346421761

Looking to carve out IT costs?
www.redhat.com/carveoutcosts/
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAkqO0gEACgkQeiVVYja6o6NNjACfXUm3mGQrO0OSFBr8a4rXT8Z2
> 8PYAn33zWHH8YecLFchGjLG9Ms2OIGH4
> =r7MA
> -----END PGP SIGNATURE-----