[Fedora-directory-users] is the howto:Posix wiki correct?

Richard Megginson rmeggins at redhat.com
Fri Jan 13 20:42:31 UTC 2006


Susan wrote:

>For host-based access control, the new method says to do the following:
>
>New Method
>
>There is already an AUXILIARY objectclass provided with the pam/nss ldap distribution on Linux
>systems: hostObject. On a RHEL4 system, this is in the schema file
>/usr/share/doc/nss_ldap-226/ldapns.schema in OpenLDAP format. You can convert to Fedora DS schema
>format using Howto:OpenLDAPMigration like so:
>
>perl ol-schema-migrate.pl /usr/share/doc/nss_ldap-226/ldapns.schema >
>/opt/fedora-ds/slapd-localhost/config/schema/61ldapns.ldif
>
>However, I was able to get that working without the schema conversion, by adding 'account'
>objectClass and then the host attribute.  It works fine and is much simpler, really...
>  
>
Yes, but it is not LDAP standard and not portable.  account is a 
structural objectclass - that means you are not supposed to add it to an 
entry that already has a structural objectclass.  See the NOTE under Old 
Method - http://directory.fedora.redhat.com/wiki/Howto:Posix

>__________________________________________________
>Do You Yahoo!?
>Tired of spam?  Yahoo! Mail has the best spam protection around 
>http://mail.yahoo.com 
>
>--
>Fedora-directory-users mailing list
>Fedora-directory-users at redhat.com
>https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3178 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/fedora-directory-users/attachments/20060113/4e1479fa/attachment.bin>


More information about the Fedora-directory-users mailing list