Michael DeHaan | 1 Apr 21:26
Picon
Favicon

Re: [Cobbler] [PATCH] Cleaning up the authn_ldap module

Bjorn Oglefjorn wrote:
> Issues addressed in the attached patch:
>   - allow anonymous or bind'ed searches to obtain a user's full DN
>   - allow for a configurable user search prefix (eg: 'uid=', 'cn=', 
> etc...)
>
> The following items (and their proposed defaults) are needed in 
> /var/lib/cobbler/settings to accommodate this patch:
> ldap_anonymous_bind: 1
> ldap_search_bind_dn: ''
> ldap_search_passwd: ''
> ldap_search_prefix: 'uid='
>
> So if your LDAP server does not allow anonymous binds, you would need 
> to set:
> ldap_anonymous_bind: 0
> ldap_search_bind_dn: 
> '<full_bind_user_dn_with_full_read_access_to_base_dn>'
> ldap_search_passwd: '<passwd>'
>
> Questions?  See me in #cobbler.
>
> --Vito Laurenza
> ------------------------------------------------------------------------
>
> _______________________________________________
> et-mgmt-tools mailing list
> et-mgmt-tools@...
> https://www.redhat.com/mailman/listinfo/et-mgmt-tools

(Continue reading)


Gmane