Hot answers tagged

1

There is no single LDAP query that can do what you want. You could: implement recursive the logic yourself via multiple calls Postfix does this. See: ldap_table(5) special_result_attribute run a cron job on a system that keeps flatter groups in order Active Directory does something similar with adminCount At this time I don't recall if sssd will work ...


1

Original Suggestion: I'd suggest using the nss-pam-ldapd package and use an nslcd mapping to provide default values for user accounts when no value comes from ldap. According to the documentation for nslcd.conf the uid/gid can be derived too: The uidNumber and gidNumber attributes in the passwd and group maps may be mapped to the objectSid followed by ...


1

pfSense is a firewall and it should stay a firewall. Increasing the attack surface by installing other kind of software isn't a very good idea. Run the OpenLDAP server on different hardware. Using it for 25 users is a very lightweight task that can run on quite a small machine or VM.


1

Well first thing is first: Don't set a clear text password, even though the configuration is hashing it in some way. Use slappasswd first. Second, you can't use ldappasswd for the directory manager. Third, I'm not sure, but something tells me something else is misconfigured, and you haven't made it clear how you changed your olcRootDN. I tried to repeat ...


1

I would create a new custom objectclass "MyCompanyPerson", defining it as deriving from person, and adding or creating the attributes I wanted. Does that sound like it's what you want? EDIT: I'm not a world expert on this, but this is an anonymized version of what I am using today. It's annoying that there are no local-use OIDs (no way that my LDAP is ever ...



Only top voted, non community-wiki answers of a minimum length are eligible