foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

more authz regexp base dn's for gssapi authentication

Browse source
This commit is contained in:
Timo Makinen 2019-06-06 02:30:56 +03:00
parent da6ed9d4ac
commit b6b3dbbca3
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
roles/ldap/server/templates/slapd.conf.j2
View file

@ -98,11 +98,15 @@ authz-regexp
authz-regexp authz-regexp
"uid=([^,]\+),cn=gssapi,cn=auth" "uid=([^,]\+),cn=gssapi,cn=auth"
"ldap:///{{ ldap_basedn }}??sub?(&(uid=$1)(objectClass=posixAccount))" "ldap:///{{ ldap_basedn }}??sub?(&(uid=$1)(objectClass=posixAccount))"
authz-regexp
"uid=([^,]\+),cn=gss-spnego,cn=auth"
"ldap:///{{ ldap_basedn }}??sub?(&(uid=$1)(objectClass=posixAccount))"
# require authentication for authenticated users that don't match above # require authentication for authenticated users that don't match above
access to * access to *
by dn.children="cn=peercred,cn=external,cn=auth" auth by dn.children="cn=peercred,cn=external,cn=auth" auth
by dn.children="cn=gssapi,cn=auth" auth by dn.children="cn=gssapi,cn=auth" auth
by dn.children="cn=gss-spnego,cn=auth" auth
by anonymous auth by anonymous auth
by * break by * break