From: Arran Cudbard-Bell Date: Tue, 22 Oct 2019 11:55:50 +0000 (-0400) Subject: Fix typo s/posixUser/posixAccount/g X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=413507828eefac875c159341d96a2c27b199f861;p=thirdparty%2Ffreeradius-server.git Fix typo s/posixUser/posixAccount/g --- diff --git a/doc/antora/modules/howto/pages/modules/ldap/authorization/locating_the_user.adoc b/doc/antora/modules/howto/pages/modules/ldap/authorization/locating_the_user.adoc index c3e59554350..ecfe9e2a744 100644 --- a/doc/antora/modules/howto/pages/modules/ldap/authorization/locating_the_user.adoc +++ b/doc/antora/modules/howto/pages/modules/ldap/authorization/locating_the_user.adoc @@ -19,7 +19,7 @@ ldap { # example - ou=people,${..base_dn} base_dn = "" <1> - # example - (&(objectClass=posixUser)(uid=%{%{Stripped-User-Name}:-%{User-Name}})) + # example - (&(objectClass=posixAccount)(uid=%{%{Stripped-User-Name}:-%{User-Name}})) filter = "(&()(=%{%{Stripped-User-Name}:-%{User-Name}}))" <2> } } diff --git a/doc/antora/modules/howto/pages/modules/ldap/authorization/user_disambiguation.adoc b/doc/antora/modules/howto/pages/modules/ldap/authorization/user_disambiguation.adoc index ade79729ff8..8e903956401 100644 --- a/doc/antora/modules/howto/pages/modules/ldap/authorization/user_disambiguation.adoc +++ b/doc/antora/modules/howto/pages/modules/ldap/authorization/user_disambiguation.adoc @@ -21,7 +21,7 @@ As the error message states, there are multiple ways to resolve this issue: a user's login account, and another represented a Human Resources record, the `user.filter` value could be changed to only return objects with an object class that indicated the object represented login account - e.g. `(&(objectClass=posixUser)(uid=...))`. + e.g. `(&(objectClass=posixAccount)(uid=...))`. 3. Change the scope of the search to be more restritive. If the additional user object is located in a child object under the user base_dn, setting `user.scope` to 'one' will resolve user object ambiguity by restricting the search to the @@ -60,7 +60,7 @@ EOF ---- ==== -== Editing mods-available/ldap to enable SSS +== Editing mods-available/ldap to enable Server Side Sorting [source,config] ---- diff --git a/doc/antora/modules/howto/pages/modules/ldap/configuration.adoc b/doc/antora/modules/howto/pages/modules/ldap/configuration.adoc index 5553d3cc6a9..480823bd319 100644 --- a/doc/antora/modules/howto/pages/modules/ldap/configuration.adoc +++ b/doc/antora/modules/howto/pages/modules/ldap/configuration.adoc @@ -45,7 +45,7 @@ ldap { # example - base_dn = "ou=people,${..base_dn}" base_dn = ",${..base_dn}" <5> - # example = "(&(uid=%{%{Stripped-User-Name}:-%{User-Name}})(objectClass=posixUser))" + # example = "(&(uid=%{%{Stripped-User-Name}:-%{User-Name}})(objectClass=posixAccount))" filter = '(&(=%{%{Stripped-User-Name}:-%{User-Name}})())' <6> } } diff --git a/doc/antora/modules/howto/pages/modules/ldap/ldapsearch/locating_objects.adoc b/doc/antora/modules/howto/pages/modules/ldap/ldapsearch/locating_objects.adoc index db699ccc6f4..5c2475135ca 100644 --- a/doc/antora/modules/howto/pages/modules/ldap/ldapsearch/locating_objects.adoc +++ b/doc/antora/modules/howto/pages/modules/ldap/ldapsearch/locating_objects.adoc @@ -164,7 +164,7 @@ LDAP server uses must be determined. Repeat the search for user objects using a filter that matches a user known to be members of one or more groups e.g. -`(&(objectClass=posixUser)(uid=doctopus))`. +`(&(objectClass=posixAccount)(uid=doctopus))`. - If the result shows a attribute containing the DN of known group, the LDAP server implements _variant 1_. @@ -272,5 +272,5 @@ user object search with '+' set as the second positional argument. .Searching for a user object and returning operational attributes ``` -ldapsearch -z 10 -x -H ldap://localhost:389 -b "dc=example,dc=com" "(ObjectClass=posixUser)" "*" "+" +ldapsearch -z 10 -x -H ldap://localhost:389 -b "dc=example,dc=com" "(ObjectClass=posixAccount)" "*" "+" ```