ldap: now got skMemberOf to replace memberof (memberof does not work on unixgroups)

2023-05-20 15:26:03 +01:00 · 2023-05-20 15:26:03 +01:00 · c17a28d7a9
commit c17a28d7a9
parent 0c57b35778
4 changed files with 72 additions and 81 deletions
--- a/machines/optimus.nix
+++ b/machines/optimus.nix
@ -96,7 +96,12 @@ in {
      ldap_default_authtok_type = password
      ldap_default_authtok = $LDAP_BIND_PW
      cache_credentials = false
-      simple_allow_groups = skynet-admins,skynet-users
+
+      ldap_user_member_of = skMemberOf
+
+      access_provider = simple
+      #simple_allow_users = tux
+      simple_allow_groups = skynet-admins

      [sssd]
      config_file_version = 2