Re: [SSSD-users] ldap_group_search_base filtering

[Stephen Gallagher]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/15/2013 12:45 PM, Bright, Daniel wrote:
> Well It looks like I’ve answered my own question with some trial
> and error, I replaced the nss stuff that I had in ldap.conf with
> this:
>
> ldap_group_search_base = 
> ou=Groups,dc=some,dc=company,dc=com?sub?(|(host=\2A)(host=somehost.test.com)(host=test))

Maybe I'm parsing this wrong, but isn't this filter saying "Any record
with a host entry, or any record with one of two specific host
entries?". It looks to me like (host=somehost.test.com)(host=test) is
redundant.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.15 (GNU/Linux)
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
> iEYEARECAAYFAlJdes8ACgkQeiVVYja6o6Pr4gCgrfClB89WEBbJsIb3p0I3YG90
> cIMAn08A9wMFqu8LvhthT1O0cWGQmBUO
> =Pkaj
> -----END PGP SIGNATURE-----