Issue #17903 has been updated by Andrew Parker.

Target version deleted (2.7.x)

As the 2.7.x line is winding down, I am removing the target at 2.7.x from 
tickets in the system. The 2.7 line should only receive fixes for major 
problems (crashes, for instance) or security problems.
----------------------------------------
Feature #17903: The LDAP group provider is hard-coded to manage posixGroup and 
it's member attribute
https://projects.puppetlabs.com/issues/17903#change-80552

Author: Neil Hemingway
Status: Unreviewed
Priority: Normal
Assignee: Neil Hemingway
Category: provider
Target version: 
Affected Puppet version: 2.7.20
Keywords: 
Branch: 


On redhat, it's useful to be able to manage also groupOfUniqueNames, with it's 
uniqueMember attribute.

nss_ldap allows the uniqueMember attribute to be nested.  This provides the 
ability to group users into organisational groups and functional groups can 
then be defined in terms of the organisational ones.

For example the following LDIF provides for only having to manage user accounts 
once:

cn=operations, ou=Groups, o=$myorg
uniqueMember: uid=developer1, ou=People, o=$myorg
uniqueMember: uid=developer2, ou=People, o=$myorg

cn=developers, ou=Groups, o=$myorg
uniqueMember: uid=sysadmin1, ou=People, o=$myorg
uniqueMember: uid=sysadmin2, ou=People, o=$myorg

cn=ssh_access, ou=Groups, o=$myorg
uniqueMember: cn=operations, ou=Groups, o=$myorg
uniqueMember: cn=developers, ou=Groups, o=$myorg

would allow all four listed users ssh access to the system in question.  The 
advantage is when developer3 comes along, adding them to the developers group 
automatically grants ssh access.


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en.

Reply via email to