File: README.filter

package info (click to toggle)
libpam-ldap 140-1
  • links: PTS
  • area: main
  • in suites: woody
  • size: 644 kB
  • ctags: 271
  • sloc: ansic: 3,168; sh: 2,267; perl: 156; makefile: 67
file content (27 lines) | stat: -rw-r--r-- 946 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
Usage of additional filters:
----------------------------

The filter option in pam_ldap works by adding filter attribute for the module.
what is does, is that it adds the filter you specify to the Default filter.

Even though this is really straightforward to use, it still has at least one
caveat i can think of. If you define a filter for nss_base_passwd in the
configuration, it will override this. 

example: 

auth required pam_ldap.so filter=(uid=*a*)

The filter can be inside parenthesis, and may contain any kind of expression
suitable for searching.

There shouldn't be any surprises with the filtering itself, but to let you
understand (without reading the source) how the filters work from the inside.
The filters are constructed by the form.

(&(&(<additional filters>)(<filters from config>))(<search filter>))

In this form it will allow you do define both including and excluding filters.


	-- Sami Haahtinen <ressu@debian.org>