pam/templates/ldap.conf


uri ldaps://ldap.<%= domain %>
base <%= dc_suffix %>
pam_lookup_policy no
pam_password exop
nss_base_passwd ou=People,<%= dc_suffix %>?one
nss_base_shadow ou=People,<%= dc_suffix %>?one
nss_base_group  ou=Group,<%= dc_suffix %>?one

nss_schema rfc2307bis
nss_map_attribute uniqueMember member
sudoers_base ou=sudoers,<%= dc_suffix %>
#sudoers_debug 2

<% if access_class = 'commiters' %>
# for restricted access
nss_override_attribute_value loginShell /usr/local/bin/sv_membersh.pl
<% end %>

1
2	uri ldaps://ldap.<%= domain %>
3	base <%= dc_suffix %>
4	pam_lookup_policy no
5	pam_password exop
6	nss_base_passwd ou=People,<%= dc_suffix %>?one
7	nss_base_shadow ou=People,<%= dc_suffix %>?one
8	nss_base_group ou=Group,<%= dc_suffix %>?one
9
10	nss_schema rfc2307bis
11	nss_map_attribute uniqueMember member
12	sudoers_base ou=sudoers,<%= dc_suffix %>
13	#sudoers_debug 2
14
15	<% if access_class = 'commiters' %>
16	# for restricted access
17	nss_override_attribute_value loginShell /usr/local/bin/sv_membersh.pl
18	<% end %>
19