Re: add posixGroup to ispmanDomain

--=-Y+hfhwF8Tzy1cC6kJeuZ
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

On Mon, 2004-02-23 at 13:34, ispman-schema-admin-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
wrote:
> Hi I was setting up the ispman server infrastructure and noticed that it
> may be helpful if that when creating a domain that the object class
> include posixGroup.
>=20
> The first thing that struck me that this is uselful is that if users do
> get shell access, when logging in though ssh there is no ldap result for
> searching for the groupname attribute.
>=20
> the ldap search performed when loggin in through ssh is
> Feb 23 16:28:01 unix slapd[1797]: conn=3D16901 op=3D1 SRCH base=3D"o=3Dis=
pman"
> scope=3D2 filter=3D"(&(objectClass=3DposixGroup))"
>=20
> Would it be harmless to add posixGroup to the objectClass list for domain=
s ?

Not entirely.  The problem is that posixGroup is a structural
objectClass and there is already another structural, which violated
schema rules and will not work on OpenLDAP 2.1 and greater, which is
more restrictive and correct schema rules.

Wil
--=20
Wil Cooley                                 [email protected]
Naked Ape Consulting                        http://nakedape.cc
* * * * Linux, UNIX, Networking and Security Solutions * * * *
* Naked Ape Consulting                   http://nakedape.cc  *
*         Tired of spam and viruses in your e-mail?          *
*  Get the Naked Ape Mail Defender! http://nakedape.cc/r/md  *

--=-Y+hfhwF8Tzy1cC6kJeuZ
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQBAOpvWJpn3uYWUEaoRAldvAJsGd8rMakBWYqDVlfE/8barOvzEqwCeJE3M
FknkTYHifOD4WbNNMEXvlUA=
=F9gw
-----END PGP SIGNATURE-----

--=-Y+hfhwF8Tzy1cC6kJeuZ--



-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click