On Thu, Aug 22, 2019 at 04:00:57PM +0200, Mattia Rizzolo wrote: > On Wed, Aug 21, 2019 at 06:38:43PM +0200, Kurt Roeckx wrote: > > On Wed, Aug 21, 2019 at 10:10:50AM +0200, Mattia Rizzolo wrote: > > > a > > > somewhat less authoritative method is checking the status of the user in > > > ldap, but that might lag behind DAM decisions, etc. > > > > There is no way to check if someone is a DD or not in ldap, there > > never was. > > Isn't checking for supplementaryGid=Debian a good way for it?
No. that returns 1935 results. The query that comes closest, returning 1007 entries, is: (&(keyfingerprint=*)(supplementaryGid=Debian)) But there are both false positives and false negatives in that list. Kurt
